Lucene search

K
cveMitreCVE-2010-2440
HistoryJun 24, 2010 - 5:30 p.m.

CVE-2010-2440

2010-06-2417:30:01
CWE-119
mitre
web.nvd.nist.gov
20
cve-2010-2440
stack-based buffer overflow
st-wizard.exe
subtitle translation wizard 3.0
remote code execution
srt file
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.1

Percentile

95.0%

Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to execute arbitrary code via a crafted SRT file with a long line after a time range. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
upredsunsubtitle_translation_wizardMatch3.0
VendorProductVersionCPE
upredsunsubtitle_translation_wizard3.0cpe:2.3:a:upredsun:subtitle_translation_wizard:3.0:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.1

Percentile

95.0%

Related for CVE-2010-2440