Описание
Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:broadcom:etrust_antivirus:8.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_pestpatrol:8.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:integrated_threat_management:8.0:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.0171
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field.
EPSS
Процентиль: 82%
0.0171
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other