Описание
Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input string.
Ссылки
- ExploitMailing ListVendor Advisory
- ExploitMailing ListVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:cygwin:cygwin:1.7.2:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.3:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.5:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.6:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.7:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.8:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.9:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.10:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.11:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.12:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.13:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.14:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.15:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.16:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.17:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.18:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.19:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.21:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.22:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.23:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.24:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.25:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.26:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.27:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.28:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.29:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.31:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.32:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.33:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.34:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.7.35:*:*:*:*:*:*:*
cpe:2.3:a:cygwin:cygwin:1.8.0:*:*:*:*:*:*:*
EPSS
Процентиль: 61%
0.00419
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-787
CWE-119
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input string.
EPSS
Процентиль: 61%
0.00419
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-787
CWE-119