Lucene search

K
cveMitreCVE-2015-1362
HistoryJan 27, 2015 - 8:04 p.m.

CVE-2015-1362

2015-01-2720:04:17
CWE-119
mitre
web.nvd.nist.gov
22
cve-2015-1362
buffer overflow
customize 35mm tab
two pilots exif pilot
arbitrary code execution
remote attackers
xml file
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.1

Confidence

High

EPSS

0.2

Percentile

96.4%

Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers to execute arbitrary code via a long string in the maker element in an XML file.

Affected configurations

Nvd
Node
two_pilotsexif_pilotMatch4.7.2
VendorProductVersionCPE
two_pilotsexif_pilot4.7.2cpe:2.3:a:two_pilots:exif_pilot:4.7.2:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.1

Confidence

High

EPSS

0.2

Percentile

96.4%

Related for CVE-2015-1362