Lucene search

K
cve[email protected]CVE-2008-7103
HistoryAug 27, 2009 - 8:30 p.m.

CVE-2008-7103

2009-08-2720:30:00
CWE-119
web.nvd.nist.gov
23
cve
2008
7103
buffer overflow
activex control
najdi.si toolbar
remote attackers
denial of service
arbitrary code
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.085 Low

EPSS

Percentile

94.5%

Stack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4.1 allows remote attackers to cause a denial of service (browser crash) or execute arbitrary code via a long Document.Location property value.

Affected configurations

NVD
Node
najdi.sitoolbarMatch2.0.4.1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.085 Low

EPSS

Percentile

94.5%

Related for CVE-2008-7103