Lucene search

K
cve[email protected]CVE-2011-4874
HistoryApr 13, 2012 - 10:41 a.m.

CVE-2011-4874

2012-04-1310:41:00
CWE-399
web.nvd.nist.gov
23
cve-2011-4874
vulnerability
microsys promotic
user-assisted
remote attackers
execute arbitrary code
denial of service
data corruption
application crash
crafted project
.pra file
nvd

8.1 High

AI Score

Confidence

High

7.9 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

0.046 Low

EPSS

Percentile

92.5%

Use-after-free vulnerability in MICROSYS PROMOTIC before 8.1.7 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (data corruption and application crash) via a crafted project (aka .pra) file.

8.1 High

AI Score

Confidence

High

7.9 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

0.046 Low

EPSS

Percentile

92.5%

Related for CVE-2011-4874