CVE-2024-28580

Опубликовано: 20 мар. 2024

Источник: nvd

CVSS3: 8.4

EPSS Низкий

Описание

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format.

Ссылки

https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
Exploit
Third Party Advisory
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:freeimage_project:freeimage:3.19.0:*:*:*:*:*:*:*

EPSS

Процентиль: 18%

0.00056

Низкий

8.4 High

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVE-2024-28580

CVSS3: 8.4

ubuntu

почти 2 года назад

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format.

CVE-2024-28580

CVSS3: 8.4

debian

почти 2 года назад

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909 ...

GHSA-fcwm-gx7c-6hgc

CVSS3: 8.4

github

почти 2 года назад

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format.

EPSS

Процентиль: 18%

0.00056

Низкий

8.4 High

CVSS3

Дефекты

CWE-121