Lucene search

K
cve[email protected]CVE-2014-2994
HistoryApr 27, 2014 - 4:32 a.m.

CVE-2014-2994

2014-04-2704:32:00
CWE-119
web.nvd.nist.gov
28
cve-2014-2994
buffer overflow
acunetix
wvs
security vulnerability
remote code execution

8.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.87 High

EPSS

Percentile

98.6%

Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL (src attribute).

8.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.87 High

EPSS

Percentile

98.6%