Lucene search

K
jvnJapan Vulnerability NotesJVN:15205734
HistoryJun 08, 2016 - 12:00 a.m.

JVN#15205734: DX Library vulnerable to remote code execution

2016-06-0800:00:00
Japan Vulnerability Notes
jvn.jp
25

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.02 Low

EPSS

Percentile

88.8%

DX Library is an open source library for creating Windows applications. DX Library contains a remote code execution vulnerability due to an issue in printfDx().

Impact

When processing a specially crafted string, an application built using DX Library may allow arbitrary code to be executed.

Solution

Update DX Library and rebuild the application
Update to the latest version of DX Library and rebuild the application.

Products Affected

  • DX Library for VisualC++ Ver3.13f to Ver3.16b
  • DX Library for BorlandC++ Ver3.13f to Ver3.16b
  • DX Library for Gnu C++ Ver3.13f to Ver3.16b

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.02 Low

EPSS

Percentile

88.8%

Related for JVN:15205734