Описание
Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkStation (aka .ws) file.
Ссылки
- Vendor Advisory
- Exploit
- Exploit
- Vendor Advisory
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ibm:personal_communications:5.9.7.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:personal_communications:5.9.7.1:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:ibm:personal_communications:6.0.3.0:*:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.76345
Высокий
9.3 Critical
CVSS2
Дефекты
CWE-119
Связанные уязвимости
github
почти 4 года назад
Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkStation (aka .ws) file.
EPSS
Процентиль: 99%
0.76345
Высокий
9.3 Critical
CVSS2
Дефекты
CWE-119