Lucene search

K
cve[email protected]CVE-2013-4290
HistoryApr 18, 2014 - 2:55 p.m.

CVE-2013-4290

2014-04-1814:55:25
CWE-119
web.nvd.nist.gov
18
cve
2013
4290
stack-based buffer overflow
openjpeg
nvd
security
vulnerability
remote attack
buffer overflow
exploit mitigation

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.9 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.9%

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2) bin/jp3d/convert.c, or (3) lib/openjp3d/event.c.

Affected configurations

NVD
Node
uclouvainopenjpegRange1.5.1
OR
uclouvainopenjpegMatch1.3
OR
uclouvainopenjpegMatch1.4
OR
uclouvainopenjpegMatch1.5

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.9 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.9%