Lucene search

K
cve[email protected]CVE-2012-2915
HistoryMay 21, 2012 - 6:55 p.m.

CVE-2012-2915

2012-05-2118:55:07
CWE-119
web.nvd.nist.gov
30
cve-2012-2915
buffer overflow
lattice semiconductor
pac-designer
remote code execution
security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.93 High

EPSS

Percentile

99.1%

Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design (.pac) file.

Affected configurations

NVD
Node
lattice_semiconductorpac-designerMatch6.2.1344

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.93 High

EPSS

Percentile

99.1%