Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-2947

Опубликовано: 24 авг. 2010
Источник: nvd
CVSS2: 10
EPSS Низкий

Описание

Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a string that is inconsistent with the expected number of fields.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jan_engelhardt:libhx:*:*:*:*:*:*:*:*
Версия до 3.5 (включая)
cpe:2.3:a:jan_engelhardt:libhx:1.10.0:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:1.10.1:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:1.10.2:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:1.15:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:1.17:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:1.18:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:1.22:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:1.23:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:1.25:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:1.26:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:1.27:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:1.28:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:2.0:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:2.1:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:2.2:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:2.3:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:2.4:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:2.5:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:2.6:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:2.7:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:2.8:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:2.9:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:3.0:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:3.1:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:3.2:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:3.3:*:*:*:*:*:*:*
cpe:2.3:a:jan_engelhardt:libhx:3.4:*:*:*:*:*:*:*

EPSS

Процентиль: 93%
0.09197
Низкий

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu логотип

CVE-2010-2947

ubuntu
больше 15 лет назад

Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a string that is inconsistent with the expected number of fields.

debian логотип

CVE-2010-2947

debian
больше 15 лет назад

Heap-based buffer overflow in the HX_split function in string.c in lib ...

github логотип

GHSA-r6wf-w69j-7xp6

github
больше 3 лет назад

Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a string that is inconsistent with the expected number of fields.

EPSS

Процентиль: 93%
0.09197
Низкий

10 Critical

CVSS2

Дефекты

CWE-119