Lucene search

K
cve[email protected]CVE-2008-2548
HistoryJun 04, 2008 - 7:32 p.m.

CVE-2008-2548

2008-06-0419:32:00
CWE-119
web.nvd.nist.gov
17
cve-2008-2548
buffer overflow
exif
remote code execution
memory corruption
mms transmission
jpeg image

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.117 Low

EPSS

Percentile

95.3%

Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assisted remote attackers to execute arbitrary code via an MMS transmission of a malformed JPEG image, which triggers memory corruption.

Affected configurations

NVD
Node
motorolarazr
CPENameOperatorVersion
motorola:razrmotorola razreq*

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.117 Low

EPSS

Percentile

95.3%

Related for CVE-2008-2548