CVE-2019-12551

Опубликовано: 22 июл. 2019

Источник: nvd

CVSS3: 5.5

CVSS2: 5.8

EPSS Низкий

Описание

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the Memcpy function (provided by the scripting engine) allows an attacker to overwrite arbitrary memory, which could lead to code execution.

Ссылки

https://ereisr00.github.io/
Exploit
Third Party Advisory
https://github.com/ereisr00/bagofbugz/blob/master/010Editor
Exploit
Third Party Advisory
https://www.sweetscape.com/010editor/manual/ReleaseNotes.htm
Release Notes
Vendor Advisory
https://ereisr00.github.io/
Exploit
Third Party Advisory
https://github.com/ereisr00/bagofbugz/blob/master/010Editor
Exploit
Third Party Advisory
https://www.sweetscape.com/010editor/manual/ReleaseNotes.htm
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sweetscape:010_editor:9.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.02143

Низкий

5.5 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-33gc-wq56-g94m

github

около 4 лет назад