Lucene search

K
cve[email protected]CVE-2010-2583
HistoryNov 03, 2010 - 1:37 p.m.

CVE-2010-2583

2010-11-0313:37:00
CWE-119
web.nvd.nist.gov
29
sonicwall
ssl-vpn
buffer overflow
remote code execution
security vulnerability
cve-2010-2583

8.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.215 Low

EPSS

Percentile

96.4%

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method.

8.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.215 Low

EPSS

Percentile

96.4%

Related for CVE-2010-2583