CVE-2013-6029

2013-12-0418:25:23

CWE-119

[email protected]

web.nvd.nist.gov

cve-2013-6029

buffer overflow

at&t connect participant application

windows

remote code execution

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

High

0.035 Low

EPSS

Percentile

91.6%

JSON

Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to execute arbitrary code via a malformed .SVT file.

Affected configurations

NVD

Node

attconnect_participant_applicationRange≤9.5.0

attconnect_participant_applicationMatch8.5.71

attconnect_participant_applicationMatch8.9.35

attconnect_participant_applicationMatch9.0.0

attconnect_participant_applicationMatch9.0.82

attconnect_participant_applicationMatch9.2.0

attconnect_participant_applicationMatch9.3.0

attconnect_participant_applicationMatch9.3.14

CPENameOperatorVersion
att:connect_participant_applicationatt connect participant applicationle9.5.0
att:connect_participant_applicationatt connect participant applicationeq8.5.71
att:connect_participant_applicationatt connect participant applicationeq8.9.35
att:connect_participant_applicationatt connect participant applicationeq9.0.0
att:connect_participant_applicationatt connect participant applicationeq9.0.82
att:connect_participant_applicationatt connect participant applicationeq9.2.0
att:connect_participant_applicationatt connect participant applicationeq9.3.0
att:connect_participant_applicationatt connect participant applicationeq9.3.14

CPE	Name	Operator	Version
att:connect_participant_application	att connect participant application	le	9.5.0
att:connect_participant_application	att connect participant application	eq	8.5.71
att:connect_participant_application	att connect participant application	eq	8.9.35
att:connect_participant_application	att connect participant application	eq	9.0.0
att:connect_participant_application	att connect participant application	eq	9.0.82
att:connect_participant_application	att connect participant application	eq	9.2.0
att:connect_participant_application	att connect participant application	eq	9.3.0
att:connect_participant_application	att connect participant application	eq	9.3.14