Lucene search

[email protected]CVE-2005-1187

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-1187

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

cve-2005-1187

winhex

buffer overflow

arbitrary code execution

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.6%

JSON

Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file name argument. NOTE: since this overflow is in the command line of an unprivileged program, it is highly likely that this is not a vulnerability.

Affected configurations

NVD

Node

x-ways_software_technology_agwinhexMatch12.05_sr-14

CPENameOperatorVersion
x-ways_software_technology_ag:winhexx-ways software technology ag winhexeq12.05_sr-14

CPE	Name	Operator	Version
x-ways_software_technology_ag:winhex	x-ways software technology ag winhex	eq	12.05_sr-14

References

securitytracker.com/id?1013727

www.unl0ck.org/files/papers/winhex.txt

exchange.xforce.ibmcloud.com/vulnerabilities/20139

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.6%

JSON

Related for CVE-2005-1187

cvelist1 nvd1