Lucene search

K
nvd[email protected]NVD:CVE-2022-1405
HistoryAug 31, 2022 - 4:15 p.m.

CVE-2022-1405

2022-08-3116:15:09
CWE-121
web.nvd.nist.gov
3
cncsoft
versions
input processing
vulnerability
buffer overflow

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

42.6%

CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible stack-based buffer overflow condition.

Affected configurations

Nvd
Node
deltawwcncsoftRange<1.01.32
VendorProductVersionCPE
deltawwcncsoft*cpe:2.3:a:deltaww:cncsoft:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

42.6%

Related for NVD:CVE-2022-1405