CVE-2008-7224

2009-09-1414:30:00

CWE-119

mitre

web.nvd.nist.gov

cve-2008-7224

buffer overflow

entity_cache

elinks

denial of service

crash

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

Low

EPSS

0.016

Percentile

87.4%

JSON

Buffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link.

Affected configurations

Nvd

Node

elinkselinksRange≤0.11.3

elinkselinksMatch0.11.1

elinkselinksMatch0.11.1-1

elinkselinksMatch0.11.2

VendorProductVersionCPE
elinkselinks*cpe:2.3:a:elinks:elinks:*:*:*:*:*:*:*:*
elinkselinks0.11.1cpe:2.3:a:elinks:elinks:0.11.1:*:*:*:*:*:*:*
elinkselinks0.11.1-1cpe:2.3:a:elinks:elinks:0.11.1-1:*:*:*:*:*:*:*
elinkselinks0.11.2cpe:2.3:a:elinks:elinks:0.11.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
elinks	elinks	*	cpe:2.3:a:elinks:elinks::::::::
elinks	elinks	0.11.1	cpe:2.3:a:elinks:elinks:0.11.1:::::::*
elinks	elinks	0.11.1-1	cpe:2.3:a:elinks:elinks:0.11.1-1:::::::*
elinks	elinks	0.11.2	cpe:2.3:a:elinks:elinks:0.11.2:::::::*