Lucene search

K
cveMitreCVE-2013-6079
HistoryOct 11, 2013 - 10:55 p.m.

CVE-2013-6079

2013-10-1122:55:40
CWE-119
mitre
web.nvd.nist.gov
17
cve-2013-6079
buffer overflow
mostgear soft
easy lan folder share
denial of service
application crash
arbitrary code
local users
security vulnerability

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.771

Percentile

98.2%

Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in the (1) registration code field in the activate license window or the (2) HKLM\SOFTWARE\MostGear\EasyLanFolderShare_V1\License registry key. NOTE: it is not clear from the original report whether this issue crosses privilege boundaries. If not, then it should not be included in CVE.

Affected configurations

Nvd
Node
mostgeareasy_lan_folder_shareMatch3.2.0.100
VendorProductVersionCPE
mostgeareasy_lan_folder_share3.2.0.100cpe:2.3:a:mostgear:easy_lan_folder_share:3.2.0.100:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.771

Percentile

98.2%