Lucene search

K
cve[email protected]CVE-2013-0726
HistoryMay 05, 2013 - 11:07 a.m.

CVE-2013-0726

2013-05-0511:07:00
CWE-119
web.nvd.nist.gov
98
cve-2013-0726
erdas
buffer overflow
remote code execution
erm_convert_to_correct_webpath
nvd
security vulnerability

8.1 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.809 High

EPSS

Percentile

98.3%

Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file.

8.1 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.809 High

EPSS

Percentile

98.3%