Lucene search

K
cve[email protected]CVE-2014-0993
HistorySep 15, 2014 - 2:55 p.m.

CVE-2014-0993

2014-09-1514:55:00
CWE-119
web.nvd.nist.gov
24
cve-2014-0993
buffer overflow
vcl
delphi xe6
c++ builder xe6
remote code execution
bmp file

7.8 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.117 Low

EPSS

Percentile

95.3%

Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote attackers to execute arbitrary code via a crafted BMP file.

7.8 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.117 Low

EPSS

Percentile

95.3%