CVE-2016-6042

Опубликовано: 01 фев. 2017

Источник: nvd

CVSS3: 7.3

CVSS2: 9.3

EPSS Низкий

Описание

IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system in the same context as the victim.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg21995118
Patch
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21995118
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_appscan:9.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:9.0.0.1:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:9.0.1.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:9.0.1.1:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:9.0.2.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:9.0.2.1:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:9.0.3.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:9.0.3.1:-:enterprise:*:*:*:*:*

EPSS

Процентиль: 73%

0.0077

Низкий

7.3 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-c998-93wx-vqcj