Lucene search

K
cve[email protected]CVE-2014-9264
HistoryDec 11, 2014 - 3:59 p.m.

CVE-2014-9264

2014-12-1115:59:05
CWE-119
web.nvd.nist.gov
27
cve
2014
9264
buffer overflow
sap
.net data provider
sql anywhere
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.926 High

EPSS

Percentile

99.0%

Stack-based buffer overflow in the .NET Data Provider in SAP SQL Anywhere allows remote attackers to execute arbitrary code via a crafted column alias.

Affected configurations

NVD
Node
sapsql_anywhere
CPENameOperatorVersion
sap:sql_anywheresap sql anywhereeq*

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.926 High

EPSS

Percentile

99.0%