Lucene search

FlexeraCVE-2013-3481

HistoryMar 27, 2014 - 4:55 p.m.

CVE-2013-3481

2014-03-2716:55:05

CWE-119

flexera

web.nvd.nist.gov

cve-2013-3481

nvd

artweaver plus

artweaver free

buffer overflow

remote code execution

jpg

image file

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

High

EPSS

0.079

Percentile

94.3%

JSON

Stack-based buffer overflow in Artweaver Plus and Free before 3.1.5 allows remote attackers to execute arbitrary code via a crafted JPG image file.

Affected configurations

Nvd

Node

b-e-softartweaver_freeRange≤3.1.4

b-e-softartweaver_plusRange≤3.1.4

VendorProductVersionCPE
b-e-softartweaver_free*cpe:2.3:a:b-e-soft:artweaver_free:*:*:*:*:*:*:*:*
b-e-softartweaver_plus*cpe:2.3:a:b-e-soft:artweaver_plus:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
b-e-soft	artweaver_free	*	cpe:2.3:a:b-e-soft:artweaver_free::::::::
b-e-soft	artweaver_plus	*	cpe:2.3:a:b-e-soft:artweaver_plus::::::::

References

forum.artweaver.de/viewtopic.php?f=5&t=2247

forum.artweaver.de/viewtopic.php?f=5&t=2248

osvdb.org/93751

secunia.com/advisories/52652

www.securityfocus.com/bid/60236

exchange.xforce.ibmcloud.com/vulnerabilities/84636

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

High

EPSS

0.079

Percentile

94.3%

JSON

Related for CVE-2013-3481