Lucene search

K
cvelistINCIBECVELIST:CVE-2023-4590
HistoryNov 27, 2023 - 12:08 p.m.

CVE-2023-4590 Buffer Overflow vulnerability in Frhed

2023-11-2712:08:04
CWE-120
INCIBE
www.cve.org
cve-2023-4590
buffer overflow
frhed
hex editor
arbitrary code execution
structured exception handler
long filename argument

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler (SEH) registers.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Frhed ",
    "vendor": "Frhed ",
    "versions": [
      {
        "status": "affected",
        "version": "1.6.0"
      }
    ]
  }
]

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

Related for CVELIST:CVE-2023-4590