Lucene search
HistoryNov 09, 2015 - 4:59 p.m.
CVE-2015-8096
cve-2015-8096
google picasa
integer overflow
remote code execution
heap-based buffer overflow
security vulnerability
8.2 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.025 Low
EPSS
Percentile
90.2%
Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related to “phase one 0x412 tag,” which triggers a heap-based buffer overflow.
Affected configurations
Node
googlepicasaMatch3.9.140
| CPE | Name | Operator | Version |
|---|---|---|---|
| google:picasa | google picasa | eq | 3.9.140 |
Related
nvd
nvd
CVE-2015-8096
2015-11-09 16:59:13
prion
prion
Integer overflow
2015-11-09 16:59:00
cvelist
cvelist
CVE-2015-8096
2015-11-09 16:00:00
kaspersky
kaspersky
KLA10698 Code execution vulnerability in Google Picasa
2015-11-09 00:00:00
openvas
openvas
Google Picasa 'Phase One Tags' Buffer Overflow Vulnerability - Windows
2015-11-26 00:00:00
Google Picasa 'Phase One Tags' Buffer Overflow Vulnerability - Mac OS X
2015-11-26 00:00:00
8.2 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.025 Low
EPSS
Percentile
90.2%
Related for CVE-2015-8096