CVE-2010-4142

Опубликовано: 02 нояб. 2010

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) SCPC_INITIALIZE, (2) SCPC_INITIALIZE_RF, or (3) SCPC_TXTEVENT packet. NOTE: it was later reported that 1.06 is also affected by one of these requests.

Комментарий

http://www.vupen.com/english/advisories/2010/2714

Ссылки

http://aluigi.org/adv/realwin_1-adv.txt
Exploit
http://secunia.com/advisories/41849
Vendor Advisory
http://www.exploit-db.com/exploits/15259
Exploit
http://www.exploit-db.com/exploits/15337
Exploit
http://www.securityfocus.com/bid/44150
Exploit
http://aluigi.org/adv/realwin_1-adv.txt
Exploit
http://secunia.com/advisories/41849
Vendor Advisory
http://www.exploit-db.com/exploits/15259
Exploit
http://www.exploit-db.com/exploits/15337
Exploit
http://www.securityfocus.com/bid/44150
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:realflex:realwin:1.06:*:*:*:*:*:*:*

cpe:2.3:a:realflex:realwin:2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.49079

Средний

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-8v2j-5pqf-5p2c

github

больше 3 лет назад