Lucene search

K
cveMitreCVE-2008-2880
HistoryJun 26, 2008 - 5:41 p.m.

CVE-2008-2880

2008-06-2617:41:00
CWE-119
mitre
web.nvd.nist.gov
25
cve-2008-2880
ibm
afp viewer
buffer overflow
remote code execution
security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.034

Percentile

91.4%

Heap-based buffer overflow in the IBM AFP Viewer Plug-in 2.0.7.1 and 3.2.1.1 allows remote attackers to execute arbitrary code via a long SRC property value. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd
Node
ibmafp_viewer_plug-inMatch2.0.7.1
OR
ibmafp_viewer_plug-inMatch3.2.1.1
VendorProductVersionCPE
ibmafp_viewer_plug-in2.0.7.1cpe:2.3:a:ibm:afp_viewer_plug-in:2.0.7.1:*:*:*:*:*:*:*
ibmafp_viewer_plug-in3.2.1.1cpe:2.3:a:ibm:afp_viewer_plug-in:3.2.1.1:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.034

Percentile

91.4%

Related for CVE-2008-2880