Lucene search

K
cveFlexeraCVE-2010-2585
HistoryOct 26, 2010 - 7:00 p.m.

CVE-2010-2585

2010-10-2619:00:02
CWE-119
flexera
web.nvd.nist.gov
27
cve-2010-2585
buffer overflow
realpage module
activex
remote code execution
security vulnerability

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

Low

EPSS

0.04

Percentile

92.2%

Multiple buffer overflows in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls allow remote attackers to execute arbitrary code via a long (1) DestURL or (2) SourceFile property value.

Affected configurations

Nvd
Node
realpagemodule_activex_controlMatch1.0.0.9
VendorProductVersionCPE
realpagemodule_activex_control1.0.0.9cpe:2.3:a:realpage:module_activex_control:1.0.0.9:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

Low

EPSS

0.04

Percentile

92.2%

Related for CVE-2010-2585