Lucene search

Japan Vulnerability NotesJVN:41875357

HistoryApr 04, 2016 - 12:00 a.m.

JVN#41875357: ActiveX control for EVA Animator vulnerable to buffer overflow

2016-04-0400:00:00

Japan Vulnerability Notes

jvn.jp

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

0.003 Low

EPSS

Percentile

70.7%

JSON

ActiveX control for EVA Animator provided by Sharp Corporation contains a buffer overflow vulnerability.

Impact

If a user views a malicious page, arbitrary code may be executed.

Solution

Remove ActiveX control for EVA Animator
The EVA Animator service ended and the related website for its service including the page to download the ActiveX control was closed in February 2016. Remove ActiveX control for EVA Animator.

Products Affected

ActiveX control for EVA Animator

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

0.003 Low

EPSS

Percentile

70.7%

JSON

Related for JVN:41875357