Описание
Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.2.9 (включая)
cpe:2.3:a:icon-labs:iconfidant_ssl_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.13831
Средний
7.5 High
CVSS2
Дефекты
CWE-119
Связанные уязвимости
github
больше 3 лет назад
Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value.
EPSS
Процентиль: 94%
0.13831
Средний
7.5 High
CVSS2
Дефекты
CWE-119