Lucene search
TalosCVELIST:CVE-2022-29886HistoryAug 03, 2022 - 12:00 a.m.
CVE-2022-29886
2022-08-0300:00:00
CWE-680
talos
www.cve.org
3
estsoft alyac
ole files
heap buffer overflow
arbitrary code execution
integer overflow
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
43.9%
An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE file can lead to a heap buffer overflow, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CNA Affected
[
{
"product": "Alyac",
"vendor": "ESTsoft",
"versions": [
{
"status": "affected",
"version": "2.5.8.544"
}
]
}
]Related
talos
talos
ESTsoft Alyac OLE header Mini FAT sectors integer overflow
2022-08-03 00:00:00
nvd
nvd
CVE-2022-29886
2022-08-05 22:15:11
prion
prion
Integer overflow
2022-08-05 22:15:00
cve
cve
CVE-2022-29886
2022-08-05 22:15:11
talosblog
talosblog
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
43.9%
Related for CVELIST:CVE-2022-29886