Lucene search

K
cve[email protected]CVE-2005-0012
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0012

2005-05-0204:00:00
web.nvd.nist.gov
15
cve-2005-0012
format string vulnerability
dillo
remote code execution
nvd

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.045 Low

EPSS

Percentile

92.5%

Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page.

Affected configurations

NVD
Node
dillodillo_web_browserMatch0.2
OR
dillodillo_web_browserMatch0.2.1
OR
dillodillo_web_browserMatch0.2.2
OR
dillodillo_web_browserMatch0.2.3
OR
dillodillo_web_browserMatch0.2.4
OR
dillodillo_web_browserMatch0.3
OR
dillodillo_web_browserMatch0.3.1
OR
dillodillo_web_browserMatch0.4
OR
dillodillo_web_browserMatch0.5.1
OR
dillodillo_web_browserMatch0.6
OR
dillodillo_web_browserMatch0.6.1
OR
dillodillo_web_browserMatch0.6.2
OR
dillodillo_web_browserMatch0.6.3
OR
dillodillo_web_browserMatch0.6.4
OR
dillodillo_web_browserMatch0.6.5
OR
dillodillo_web_browserMatch0.6.6
OR
dillodillo_web_browserMatch0.7
OR
dillodillo_web_browserMatch0.7.1
OR
dillodillo_web_browserMatch0.7.1.2
OR
dillodillo_web_browserMatch0.7.2
OR
dillodillo_web_browserMatch0.7.3
OR
dillodillo_web_browserMatch0.8
OR
dillodillo_web_browserMatch0.8.1
OR
dillodillo_web_browserMatch0.8.2
OR
dillodillo_web_browserMatch0.8.3

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.045 Low

EPSS

Percentile

92.5%