exploitDog

CVE-2023-50245

Опубликовано: 11 дек. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

OpenEXR-viewer is a viewer for OpenEXR files with detailed metadata probing. Versions prior to 0.6.1 have a memory overflow vulnerability. This issue is fixed in version 0.6.1.

Ссылки

https://github.com/afichet/openexr-viewer/commit/d0a7e85dfeb519951fb8a8d70f73f30d41cdd3d9
Patch
https://github.com/afichet/openexr-viewer/security/advisories/GHSA-99jg-r3f4-rpxj
Exploit
Vendor Advisory
https://github.com/afichet/openexr-viewer/commit/d0a7e85dfeb519951fb8a8d70f73f30d41cdd3d9
Patch
https://github.com/afichet/openexr-viewer/security/advisories/GHSA-99jg-r3f4-rpxj
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:afichet:openexr_viewer:*:*:*:*:*:*:*:*

Версия до 0.6.1 (исключая)

EPSS

Процентиль: 87%

0.03324

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-120

Связанные уязвимости

GHSA-99jg-r3f4-rpxj

CVSS3: 9.8

github

около 2 лет назад

memory overflow vulnerability in OpenEXR-viewer

EPSS

Процентиль: 87%

0.03324

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-120