Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-436p-pp82-ppwq

Опубликовано: 29 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted file, arbitrary code may be executed on the user's environment.

xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted file, arbitrary code may be executed on the user's environment.

EPSS

Процентиль: 24%
0.00081
Низкий

7 High

CVSS3

Дефекты

CWE-120
CWE-121
CWE-787

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 1 года назад

xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted file, arbitrary code may be executed on the user's environment.

CVSS3: 7.8
nvd
больше 1 года назад

xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted file, arbitrary code may be executed on the user's environment.

CVSS3: 7.8
debian
больше 1 года назад

xfpt versions prior to 1.01 fails to handle appropriately some paramet ...

CVSS3: 7.8
fstec
около 1 года назад

Уязвимость конвертора текста в структуру XML-файла XFPT, связанная с копированием буфера без проверки размера входных данных, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 24%
0.00081
Низкий

7 High

CVSS3

Дефекты

CWE-120
CWE-121
CWE-787