Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-4701

Опубликовано: 20 янв. 2011
Источник: nvd
CVSS2: 7.6
EPSS Средний

Описание

Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long record in a Fax Cover Page (.cov) file. NOTE: some of these details are obtained from third party information.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_2003_server:*:r2_sp2:enterprise:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:*:*:professional:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*

EPSS

Процентиль: 98%
0.58316
Средний

7.6 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

github
больше 3 лет назад

Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long record in a Fax Cover Page (.cov) file. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 98%
0.58316
Средний

7.6 High

CVSS2

Дефекты

CWE-119