Lucene search

K
cveRedhatCVE-2013-2127
HistoryAug 14, 2013 - 3:55 p.m.

CVE-2013-2127

2013-08-1415:55:06
CWE-119
redhat
web.nvd.nist.gov
24
cve-2013-2127
buffer overflow
exposure correction
libraw
denial of service
arbitrary code
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.01

Percentile

84.0%

Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

Affected configurations

Nvd
Node
librawlibrawRange0.15.0
VendorProductVersionCPE
librawlibraw*cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.01

Percentile

84.0%