Описание
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution via the \xB0\x00\x3c byte sequence.
Ссылки
- Broken Link
- ProductRelease Notes
- Product
- Not Applicable
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.12 (включая)
cpe:2.3:a:uci:idol2:*:*:*:*:*:*:*:*
EPSS
Процентиль: 85%
0.02551
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 9.8
github
больше 1 года назад
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution via the \xB0\x00\x3c byte sequence.
EPSS
Процентиль: 85%
0.02551
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-20