Lucene search
HistoryJul 23, 2014 - 2:55 p.m.
CVE-2014-3938
autodesk
sketchbook pro
cve-2014-3938
integer overflow
remote code execution
psd file
heap-based buffer overflow
security vulnerability
8.2 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.019 Low
EPSS
Percentile
88.5%
Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow.
Affected configurations
Node
autodesksketchbook_proRange≤6.2.5
ORautodesksketchbook_proMatch6.2.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| autodesk:sketchbook_pro | autodesk sketchbook pro | le | 6.2.5 |
| autodesk:sketchbook_pro | autodesk sketchbook pro | eq | 6.2.4 |
Related
cvelist
cvelist
CVE-2014-3938
2014-07-23 14:00:00
prion
prion
Integer overflow
2014-07-23 14:55:00
nvd
nvd
CVE-2014-3938
2014-07-23 14:55:05
nessus
nessus
Autodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities
2014-08-25 00:00:00
Autodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities
2014-08-25 00:00:00
8.2 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.019 Low
EPSS
Percentile
88.5%
Related for CVE-2014-3938