Lucene search

K
cveMitreCVE-2003-1170
HistoryMay 10, 2005 - 4:00 a.m.

CVE-2003-1170

2005-05-1004:00:00
mitre
web.nvd.nist.gov
19
cve-2003-1170
kpopup
format string vulnerability
denial of service
arbitrary code execution

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

21.0%

Format string vulnerability in main.cpp in kpopup 0.9.1 and 0.9.5pre2 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via format string specifiers in command line arguments.

Affected configurations

Nvd
Node
gernot_stockerkpopupMatch0.9.1
OR
gernot_stockerkpopupMatch0.9.5_pre2
VendorProductVersionCPE
gernot_stockerkpopup0.9.1cpe:2.3:a:gernot_stocker:kpopup:0.9.1:*:*:*:*:*:*:*
gernot_stockerkpopup0.9.5_pre2cpe:2.3:a:gernot_stocker:kpopup:0.9.5_pre2:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

21.0%

Related for CVE-2003-1170