Lucene search

K
cve[email protected]CVE-2015-8221
HistoryNov 17, 2015 - 3:59 p.m.

CVE-2015-8221

2015-11-1715:59:22
CWE-119
CWE-189
web.nvd.nist.gov
846
cve-2015-8221
google
picasa
integer overflow
remote code execution
buffer overflow
nvd

8.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.025 Low

EPSS

Percentile

90.1%

Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CAMF section in a FOVb image, which triggers a heap-based buffer overflow.

Affected configurations

NVD
Node
googlepicasaRange3.9.140
CPENameOperatorVersion
google:picasagoogle picasale3.9.140

8.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.025 Low

EPSS

Percentile

90.1%

Related for CVE-2015-8221