CVE-2018-17408

Опубликовано: 03 окт. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Средний

Описание

Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute arbitrary code via a crafted CSV file that is accessed through the Import CSV File menu.

Ссылки

https://blog.spentera.id/zahir-accounting-enterprise-plus-6/
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/45505/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/45560/
Exploit
Third Party Advisory
VDB Entry
https://blog.spentera.id/zahir-accounting-enterprise-plus-6/
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/45505/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/45560/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zahiraccounting:zahir_enterprise_plus:6:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.6203

Средний

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-7p4m-hc3f-x92r