Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-1777

Опубликовано: 13 апр. 2012
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Multiple buffer overflows in the (1) heap_add_entry and (2) relocate_dir functions in archive_read_support_format_iso9660.c in libarchive through 2.8.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ISO9660 image.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:freebsd:libarchive:*:*:*:*:*:*:*:*
Версия до 2.8.5 (включая)
cpe:2.3:a:freebsd:libarchive:2.0:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.1:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.2:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.2.3:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.3:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.4:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.5:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.6:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.6.1:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.6.2:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.7.0:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.7.1:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.8.0:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.8.1:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.8.2:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.8.3:*:*:*:*:*:*:*
cpe:2.3:a:freebsd:libarchive:2.8.4:*:*:*:*:*:*:*

EPSS

Процентиль: 84%
0.02367
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 13 лет назад

Multiple buffer overflows in the (1) heap_add_entry and (2) relocate_dir functions in archive_read_support_format_iso9660.c in libarchive through 2.8.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ISO9660 image.

redhat
больше 14 лет назад

Multiple buffer overflows in the (1) heap_add_entry and (2) relocate_dir functions in archive_read_support_format_iso9660.c in libarchive through 2.8.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ISO9660 image.

debian
больше 13 лет назад

Multiple buffer overflows in the (1) heap_add_entry and (2) relocate_d ...

github
больше 3 лет назад

Multiple buffer overflows in the (1) heap_add_entry and (2) relocate_dir functions in archive_read_support_format_iso9660.c in libarchive through 2.8.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ISO9660 image.

oracle-oval
больше 13 лет назад

ELSA-2011-1507: libarchive security update (MODERATE)

EPSS

Процентиль: 84%
0.02367
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119