Lucene search

K
cve[email protected]CVE-2024-0429
HistoryJan 11, 2024 - 4:15 p.m.

CVE-2024-0429

2024-01-1116:15:54
CWE-119
web.nvd.nist.gov
12
nvd
cve-2024-0429
hex workshop
denial service
vulnerability

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

A denial service vulnerability has been found on Β Hex Workshop affecting version 6.7, an attacker could send a command line file arguments and control the Structured Exception Handler (SEH) records resulting in a service shutdown.

Affected configurations

Vulners
NVD
Node
hex_workshophex_workshopRange≀6.7 (6.8.0.5419 / Sep 1 2014)

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Hex Workshop",
    "vendor": "Hex Workshop",
    "versions": [
      {
        "status": "affected",
        "version": "6.7 (6.8.0.5419 / Sep 1 2014)"
      }
    ]
  }
]

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for CVE-2024-0429