Lucene search

K
cvelistIcscertCVELIST:CVE-2021-42704
HistoryMay 18, 2022 - 4:24 p.m.

CVE-2021-42704 Inkscape Out-of-bounds Write

2022-05-1816:24:51
CWE-787
icscert
www.cve.org
3
inkscape
version 0.91
out-of-bounds write
vulnerability
execute code

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

28.9%

Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code.

CNA Affected

[
  {
    "product": "Inkscape",
    "vendor": "Inkscape",
    "versions": [
      {
        "status": "affected",
        "version": "0.91"
      }
    ]
  }
]

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

28.9%