Описание
Visual truncation vulnerability in WinImage 8.10 and earlier allows remote attackers to spoof a destination filename via a long sequence of space characters in a filename within a (1) .IMG or (2) .ISO file. NOTE: this can be leveraged with a separate directory traversal vulnerability to trick a careful user into overwriting arbitrary files.
Ссылки
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:winimage:winimage:8.0:*:*:*:*:*:*:*
cpe:2.3:a:winimage:winimage:8.10:*:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.00434
Низкий
9.3 Critical
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Visual truncation vulnerability in WinImage 8.10 and earlier allows remote attackers to spoof a destination filename via a long sequence of space characters in a filename within a (1) .IMG or (2) .ISO file. NOTE: this can be leveraged with a separate directory traversal vulnerability to trick a careful user into overwriting arbitrary files.
EPSS
Процентиль: 62%
0.00434
Низкий
9.3 Critical
CVSS2
Дефекты
NVD-CWE-Other