Lucene search

MitreCVE-2008-5884

HistoryJan 12, 2009 - 8:00 p.m.

CVE-2008-5884

2009-01-1220:00:02

mitre

web.nvd.nist.gov

cve-2008-5884

ayeview 2.20

denial of service

application crash

gif file

malformed header

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.6

Confidence

High

EPSS

0.003

Percentile

69.6%

JSON

AyeView 2.20 allows user-assisted attackers to cause a denial of service (application crash) via a GIF file with a malformed header.

Affected configurations

Nvd

Node

zkesoftayeviewMatch2.20

VendorProductVersionCPE
zkesoftayeview2.20cpe:2.3:a:zkesoft:ayeview:2.20:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zkesoft	ayeview	2.20	cpe:2.3:a:zkesoft:ayeview:2.20:::::::*

References

securityreason.com/securityalert/4900

www.securityfocus.com/archive/1/497045/100/0/threaded

www.securityfocus.com/bid/31572

exchange.xforce.ibmcloud.com/vulnerabilities/45678

www.exploit-db.com/exploits/6668

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.6

Confidence

High

EPSS

0.003

Percentile

69.6%

JSON

Related for CVE-2008-5884