Lucene search
HistoryJul 23, 2014 - 2:55 p.m.
CVE-2014-3939
cve-2014-3939
heap-based buffer overflow
autodesk sketchbook pro
remote code execution
pxd file
security vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.2 High
AI Score
Confidence
High
0.028 Low
EPSS
Percentile
90.7%
Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file.
Affected configurations
Node
autodesksketchbook_proRange≤6.2.5
ORautodesksketchbook_proMatch6.2.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| autodesk:sketchbook_pro | autodesk sketchbook pro | le | 6.2.5 |
| autodesk:sketchbook_pro | autodesk sketchbook pro | eq | 6.2.4 |
Related
nvd
nvd
CVE-2014-3939
2014-07-23 14:55:06
prion
prion
Heap overflow
2014-07-23 14:55:00
cvelist
cvelist
CVE-2014-3939
2014-07-23 14:00:00
nessus
nessus
Autodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities
2014-08-25 00:00:00
Autodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities
2014-08-25 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.2 High
AI Score
Confidence
High
0.028 Low
EPSS
Percentile
90.7%
Related for CVE-2014-3939