Lucene search

K
cve[email protected]CVE-2009-1352
HistoryApr 21, 2009 - 4:24 p.m.

CVE-2009-1352

2009-04-2116:24:52
CWE-119
web.nvd.nist.gov
24
cve-2009-1352
buffer overflow
powerchm
denial of service
remote attackers
html
arbitrary code

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.09 Low

EPSS

Percentile

94.7%

Stack-based buffer overflow in Dawningsoft PowerCHM 5.7 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an HTML file with a link to a long URL, as demonstrated by a .rar URL.

Affected configurations

NVD
Node
dawningsoftpowerchmMatch5.7

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.09 Low

EPSS

Percentile

94.7%

Related for CVE-2009-1352