Lucene search

K
cveMitreCVE-2008-1461
HistoryMar 24, 2008 - 6:44 p.m.

CVE-2008-1461

2008-03-2418:44:00
CWE-119
mitre
web.nvd.nist.gov
30
cve-2008-1461
buffer overflow
xnview
remote attackers
arbitrary code
long filename argument

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.127

Percentile

95.5%

Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker.

Affected configurations

Nvd
Node
xnviewxnviewMatch1.92.1
VendorProductVersionCPE
xnviewxnview1.92.1cpe:2.3:a:xnview:xnview:1.92.1:*:*:*:*:*:*:*

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.127

Percentile

95.5%

Related for CVE-2008-1461