Lucene search

K
cveCiscoCVE-2014-8001
HistoryNov 25, 2014 - 5:59 p.m.

CVE-2014-8001

2014-11-2517:59:00
CWE-119
cisco
web.nvd.nist.gov
25
cisco
openh264
cve-2014-8001
buffer overflow
remote code execution
media file

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.2

Confidence

Low

EPSS

0.337

Percentile

97.1%

Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.

Affected configurations

Nvd
Node
ciscoopenh264Range1.2.0
VendorProductVersionCPE
ciscoopenh264*cpe:2.3:a:cisco:openh264:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.2

Confidence

Low

EPSS

0.337

Percentile

97.1%

Related for CVE-2014-8001