Lucene search

[email protected]CVE-2008-6897

HistoryAug 05, 2009 - 10:30 p.m.

CVE-2008-6897

2009-08-0522:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-6897

getleft.exe

buffer overflows

denial of service

remote code execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.031 Low

EPSS

Percentile

91.1%

JSON

Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) “a” HTML tag; a long src attribute in (2) embed, (3) img, or (4) script tags; (5) a long background attribute in a body tag; and other unspecified tags.

Affected configurations

NVD

Node

andres_garciagetleftMatch1.2

CPENameOperatorVersion
andres_garcia:getleftandres garcia getlefteq1.2

CPE	Name	Operator	Version
andres_garcia:getleft	andres garcia getleft	eq	1.2

References

www.securityfocus.com/bid/32994

exchange.xforce.ibmcloud.com/vulnerabilities/47597

www.exploit-db.com/exploits/7564

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.031 Low

EPSS

Percentile

91.1%

JSON

Related for CVE-2008-6897

prion1 cvelist1 nvd1