Lucene search

K
cve[email protected]CVE-2015-6948
HistorySep 15, 2015 - 6:59 p.m.

CVE-2015-6948

2015-09-1518:59:08
CWE-119
web.nvd.nist.gov
21
cve-2015-6948
heap-based buffer overflow
corel wordperfect
nvd
information security
remote code execution

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.096 Low

EPSS

Percentile

94.8%

Heap-based buffer overflow in the Microsoft Word document conversion feature in Corel WordPerfect allows remote attackers to execute arbitrary code via a crafted document.

Affected configurations

NVD
Node
corelwordperfect
CPENameOperatorVersion
corel:wordperfectcorel wordperfecteq*

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.096 Low

EPSS

Percentile

94.8%

Related for CVE-2015-6948