CVE-2014-9205

Опубликовано: 29 мар. 2015

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.2.19 and PROMOTIC development before 8.3.2 allows remote attackers to execute arbitrary code by providing a large amount of data.

Ссылки

http://www.promotic.eu/en/pmdoc/News.htm
Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-15-091/
https://ics-cert.us-cert.gov/advisories/ICSA-15-062-01
Third Party Advisory
US Government Resource
http://www.promotic.eu/en/pmdoc/News.htm
Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-15-091/
https://ics-cert.us-cert.gov/advisories/ICSA-15-062-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsys:promotic:*:*:*:*:stable:*:*:*

Версия до 8.2.18 (включая)

cpe:2.3:a:microsys:promotic:*:*:*:*:development:*:*:*

Версия до 8.3.1 (включая)

EPSS

Процентиль: 89%

0.04557

Низкий

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-vmwc-2f73-x9p6

github

больше 3 лет назад