Lucene search

K
cve[email protected]CVE-2009-3709
HistoryOct 16, 2009 - 4:30 p.m.

CVE-2009-3709

2009-10-1616:30:00
CWE-119
web.nvd.nist.gov
25
cve-2009-3709
meta content optimizer
konae technologies alleycode
html editor
buffer overflow
remote code execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.034 Low

EPSS

Percentile

91.5%

Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag.

Affected configurations

NVD
Node
konaealleycode_html_editorMatch2.21

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.034 Low

EPSS

Percentile

91.5%

Related for CVE-2009-3709