CVE-2011-4000

2011-11-0822:55:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-4000

buffer overflow

chasen 2.4.x

remote attackers

arbitrary code

crafted string

nvd

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.073 Low

EPSS

Percentile

94.0%

JSON

Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string.

CPENameOperatorVersion
nara_institute_of_science_and_technology:chasennara institute of science and technology chaseneq2.4.0
nara_institute_of_science_and_technology:chasennara institute of science and technology chaseneq2.4.4
nara_institute_of_science_and_technology:chasennara institute of science and technology chaseneq2.4.3
nara_institute_of_science_and_technology:chasennara institute of science and technology chaseneq2.4.2
nara_institute_of_science_and_technology:chasennara institute of science and technology chaseneq2.4.1

CPE	Name	Operator	Version
nara_institute_of_science_and_technology:chasen	nara institute of science and technology chasen	eq	2.4.0
nara_institute_of_science_and_technology:chasen	nara institute of science and technology chasen	eq	2.4.4
nara_institute_of_science_and_technology:chasen	nara institute of science and technology chasen	eq	2.4.3
nara_institute_of_science_and_technology:chasen	nara institute of science and technology chasen	eq	2.4.2
nara_institute_of_science_and_technology:chasen	nara institute of science and technology chasen	eq	2.4.1