Lucene search

K
cve[email protected]CVE-2008-0101
HistoryJan 08, 2008 - 2:46 a.m.

CVE-2008-0101

2008-01-0802:46:00
CWE-20
web.nvd.nist.gov
19
vulnerability
format string
white dune
remote code execution
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.046 Low

EPSS

Percentile

92.6%

Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file.

Affected configurations

NVD
Node
white_dunewhite_duneRange0.29beta791

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.046 Low

EPSS

Percentile

92.6%