CVE-2011-0500

Опубликовано: 20 янв. 2011

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "value" attribute, as demonstrated using a valitem with the mp3 name.

Ссылки

http://secunia.com/advisories/42866
Vendor Advisory
http://secunia.com/advisories/42876
Vendor Advisory
http://www.exploit-db.com/exploits/15936
Exploit
http://secunia.com/advisories/42866
Vendor Advisory
http://secunia.com/advisories/42876
Vendor Advisory
http://www.exploit-db.com/exploits/15936
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:verytools:videospirit_lite:1.4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:verytools:videospirit_pro:*:*:*:*:*:*:*:*

Версия до 1.68 (включая)

cpe:2.3:a:verytools:videospirit_pro:1.6.8.1:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.64306

Средний

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-c7jj-cg79-r337

github

больше 3 лет назад