Lucene search

K
cve[email protected]CVE-2008-3209
HistoryJul 18, 2008 - 3:13 p.m.

CVE-2008-3209

2008-07-1815:13:00
CWE-119
web.nvd.nist.gov
25
cve-2008-3209
bigif.dll
black ice document imaging sdk
buffer overflow
remote code execution
activex control
security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.094 Low

EPSS

Percentile

94.8%

Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remote attackers to execute arbitrary code via a long string argument to the GetNumberOfImagesInGifFile method in the BIImgFrm Control ActiveX control in biimgfrm.ocx. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
blackiceblack_ice_document_imaging_sdkMatch10.95

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.094 Low

EPSS

Percentile

94.8%

Related for CVE-2008-3209