Lucene search

K
cve[email protected]CVE-2014-9266
HistoryDec 08, 2014 - 4:59 p.m.

CVE-2014-9266

2014-12-0816:59:07
CWE-94
web.nvd.nist.gov
19
cve-2014-9266
stwconfig
activex control
samsung smartviewer
remote code execution
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.468 Medium

EPSS

Percentile

97.5%

The STWConfig ActiveX control in Samsung SmartViewer does not properly initialize a variable, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

NVD
Node
samsungsmart_viewerMatch-

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.468 Medium

EPSS

Percentile

97.5%

Related for CVE-2014-9266