CVE-2023-28291

2023-04-1121:15:27

CWE-20

[email protected]

web.nvd.nist.gov

130

cve-2023-28291

raw image

extension

remote code execution

vulnerability

nvd

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

51.7%

JSON

Raw Image Extension Remote Code Execution Vulnerability

Affected configurations

Vulners

NVD

Node

microsoftraw_image_extensionMatch-

VendorProductVersionCPE
microsoftraw_image_extension*cpe:2.3:a:microsoft:raw_image_extension:*:*:*:*:*:*:*:*
microsoftraw_image_extension*cpe:2.3:a:microsoft:raw_image_extension:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	raw_image_extension	*	cpe:2.3:a:microsoft:raw_image_extension::::::::
microsoft	raw_image_extension	*	cpe:2.3:a:microsoft:raw_image_extension::::::::

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "Raw Image Extension",
    "cpes": [
      "cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows 10 Version 20H2 for 32-bit Systems",
      "Windows 10 Version 20H2 for ARM64-based Systems",
      "Windows 11 version 21H2 for x64-based Systems",
      "Windows 11 version 21H2 for ARM64-based Systems",
      "Windows 10 Version 21H2 for 32-bit Systems",
      "Windows 10 Version 21H2 for ARM64-based Systems",
      "Windows 10 Version 21H2 for x64-based Systems",
      "Windows 11 Version 22H2 for ARM64-based Systems",
      "Windows 11 Version 22H2 for x64-based Systems",
      "Windows 10 for 32-bit Systems",
      "Windows 10 for x64-based Systems"
    ],
    "versions": [
      {
        "version": "2.1.0.0",
        "lessThan": "2.1.60611.0",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "2.1.0.0",
        "lessThan": "2.0.60612.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]