Lucene search

[email protected]CVE-2009-0812

HistoryMar 04, 2009 - 5:30 p.m.

CVE-2009-0812

2009-03-0417:30:02

CWE-119

[email protected]

web.nvd.nist.gov

cve

2009

0812

buffer overflow

breakpoint software

hex workshop

remote attack

arbitrary code

intel hex code

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

Low

0.116 Low

EPSS

Percentile

95.3%

JSON

Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions allows remote attackers to execute arbitrary code via a crafted Intel Hex Code (.hex) file. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

bpsofthex_workshopRange≤6.0.0

bpsofthex_workshopMatch1.0

bpsofthex_workshopMatch2.00

bpsofthex_workshopMatch2.01

bpsofthex_workshopMatch2.10

bpsofthex_workshopMatch2.20

bpsofthex_workshopMatch2.50

bpsofthex_workshopMatch2.52

bpsofthex_workshopMatch2.53

bpsofthex_workshopMatch2.54

bpsofthex_workshopMatch3.00

bpsofthex_workshopMatch3.02

bpsofthex_workshopMatch3.10

bpsofthex_workshopMatch3.11

bpsofthex_workshopMatch4.00

bpsofthex_workshopMatch4.10

bpsofthex_workshopMatch4.20

bpsofthex_workshopMatch4.21

bpsofthex_workshopMatch4.22

bpsofthex_workshopMatch4.23

bpsofthex_workshopMatch5.0

bpsofthex_workshopMatch5.1

bpsofthex_workshopMatch5.1.3

bpsofthex_workshopMatch5.1.4

bpsofthex_workshopMatch5.02

bpsofthex_workshopMatch6.0.1

CPENameOperatorVersion
bpsoft:hex_workshopbpsoft hex workshople6.0.0
bpsoft:hex_workshopbpsoft hex workshopeq1.0
bpsoft:hex_workshopbpsoft hex workshopeq2.00
bpsoft:hex_workshopbpsoft hex workshopeq2.01
bpsoft:hex_workshopbpsoft hex workshopeq2.10
bpsoft:hex_workshopbpsoft hex workshopeq2.20
bpsoft:hex_workshopbpsoft hex workshopeq2.50
bpsoft:hex_workshopbpsoft hex workshopeq2.52
bpsoft:hex_workshopbpsoft hex workshopeq2.53
bpsoft:hex_workshopbpsoft hex workshopeq2.54

CPE	Name	Operator	Version
bpsoft:hex_workshop	bpsoft hex workshop	le	6.0.0
bpsoft:hex_workshop	bpsoft hex workshop	eq	1.0
bpsoft:hex_workshop	bpsoft hex workshop	eq	2.00
bpsoft:hex_workshop	bpsoft hex workshop	eq	2.01
bpsoft:hex_workshop	bpsoft hex workshop	eq	2.10
bpsoft:hex_workshop	bpsoft hex workshop	eq	2.20
bpsoft:hex_workshop	bpsoft hex workshop	eq	2.50
bpsoft:hex_workshop	bpsoft hex workshop	eq	2.52
bpsoft:hex_workshop	bpsoft hex workshop	eq	2.53
bpsoft:hex_workshop	bpsoft hex workshop	eq	2.54

Rows per page:

1-10 of 261

References

secunia.com/advisories/34021

www.exploit-db.com/exploits/9550

www.securityfocus.com/archive/1/501300/100/0/threaded

www.securityfocus.com/bid/33932

exchange.xforce.ibmcloud.com/vulnerabilities/48970

www.exploit-db.com/exploits/8121

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

Low

0.116 Low

EPSS

Percentile

95.3%

JSON

Related for CVE-2009-0812

prion1 openvas2 cvelist1 nvd1