Lucene search

K
cvelistINCIBECVELIST:CVE-2024-0429
HistoryJan 11, 2024 - 4:04 p.m.

CVE-2024-0429 Buffer overflow vulnerability on Hex Workshop

2024-01-1116:04:27
CWE-119
INCIBE
www.cve.org
buffer overflow
hex workshop
version 6.7
denial service
structured exception handler (seh)
service shutdown

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

9.1%

A denial service vulnerability has been found on Β Hex Workshop affecting version 6.7, an attacker could send a command line file arguments and control the Structured Exception Handler (SEH) records resulting in a service shutdown.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Hex Workshop",
    "vendor": "Hex Workshop",
    "versions": [
      {
        "status": "affected",
        "version": "6.7 (6.8.0.5419 / Sep 1 2014)"
      }
    ]
  }
]

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

9.1%

Related for CVELIST:CVE-2024-0429