Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-2575

Опубликовано: 30 авг. 2010
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:kde:kde_sc:4.3.0:*:*:*:*:*:*:*
cpe:2.3:a:kde:kde_sc:4.3.1:*:*:*:*:*:*:*
cpe:2.3:a:kde:kde_sc:4.3.2:*:*:*:*:*:*:*
cpe:2.3:a:kde:kde_sc:4.3.3:*:*:*:*:*:*:*
cpe:2.3:a:kde:kde_sc:4.3.4:*:*:*:*:*:*:*
cpe:2.3:a:kde:kde_sc:4.3.5:*:*:*:*:*:*:*
cpe:2.3:a:kde:kde_sc:4.4.0:*:*:*:*:*:*:*
cpe:2.3:a:kde:kde_sc:4.4.1:*:*:*:*:*:*:*
cpe:2.3:a:kde:kde_sc:4.4.2:*:*:*:*:*:*:*
cpe:2.3:a:kde:kde_sc:4.4.3:*:*:*:*:*:*:*
cpe:2.3:a:kde:kde_sc:4.4.4:*:*:*:*:*:*:*
cpe:2.3:a:kde:kde_sc:4.4.5:*:*:*:*:*:*:*
cpe:2.3:a:kde:kde_sc:4.5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 90%
0.05146
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 15 лет назад

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.

redhat
больше 15 лет назад

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.

debian
больше 15 лет назад

Heap-based buffer overflow in the RLE decompression functionality in t ...

github
больше 3 лет назад

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.

EPSS

Процентиль: 90%
0.05146
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119