CVE-2010-1686

Опубликовано: 05 мая 2010

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Stack-based buffer overflow in (1) Urgent Backup 3.20, and (2) ABC Backup Pro 5.20 and ABC Backup 5.50, allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP archive.

Ссылки

http://secunia.com/advisories/39699
Vendor Advisory
http://secunia.com/advisories/39701
Vendor Advisory
http://www.corelan.be:8800/advisories.php?id=CORELAN-10-034
http://www.vupen.com/english/advisories/2010/1046
Vendor Advisory
http://www.vupen.com/english/advisories/2010/1047
Vendor Advisory
http://secunia.com/advisories/39699
Vendor Advisory
http://secunia.com/advisories/39701
Vendor Advisory
http://www.corelan.be:8800/advisories.php?id=CORELAN-10-034
http://www.vupen.com/english/advisories/2010/1046
Vendor Advisory
http://www.vupen.com/english/advisories/2010/1047
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:abcbackup:abc_backup:5.20:-:pro:*:*:*:*:*

cpe:2.3:a:abcbackup:abc_backup:5.50:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:internet-soft:urgent_backup:3.20:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05203

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-f5j2-545r-3jg6

github

больше 3 лет назад