Lucene search

K
kasperskyKaspersky LabKLA10078
HistoryAug 09, 2013 - 12:00 a.m.

KLA10078 DoS vulnerability in B-e-soft Artweaver

2013-08-0900:00:00
Kaspersky Lab
threats.kaspersky.com
26

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.424

Percentile

97.3%

A buffer overflow vulnerability was found in Artweaver. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited from the network at a point related to unknown applications via a specially designed AWD file.

Original advisories

Artweaver blog

Exploitation

Public exploits exist for this vulnerability.

Related products

Artweaver

CVE list

CVE-2013-2576 high

Solution

Update to latest version

Impacts

  • ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

  • DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

  • B-e-Soft Artweaver Free versions 3.1.5 and earlierB-e-Soft Artweaver PlusΒ versions 3.1.5 and earlier

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.424

Percentile

97.3%