Lucene search

K
cveFlexeraCVE-2013-0742
HistoryOct 03, 2013 - 11:55 p.m.

CVE-2013-0742

2013-10-0323:55:04
CWE-119
flexera
web.nvd.nist.gov
52
cve-2013-0742
corel pdf fusion
buffer overflow
remote code execution
denial of service
xps file
security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.4

Confidence

High

EPSS

0.933

Percentile

99.1%

Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long ZIP directory entry name in an XPS file.

Affected configurations

Nvd
Node
corelpdf_fusionMatch1.11
VendorProductVersionCPE
corelpdf_fusion1.11cpe:2.3:a:corel:pdf_fusion:1.11:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.4

Confidence

High

EPSS

0.933

Percentile

99.1%