Lucene search

K
cveMitreCVE-2015-8096
HistoryNov 09, 2015 - 4:59 p.m.

CVE-2015-8096

2015-11-0916:59:13
CWE-119
CWE-189
mitre
web.nvd.nist.gov
555
cve-2015-8096
google picasa
integer overflow
remote code execution
heap-based buffer overflow
security vulnerability

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.025

Percentile

90.2%

Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related to “phase one 0x412 tag,” which triggers a heap-based buffer overflow.

Affected configurations

Nvd
Node
googlepicasaMatch3.9.140
VendorProductVersionCPE
googlepicasa3.9.140cpe:2.3:a:google:picasa:3.9.140:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.025

Percentile

90.2%

Related for CVE-2015-8096