Lucene search
HistoryAug 09, 2006 - 12:04 a.m.
CVE-2006-4024
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
High
EPSS
0.01
Percentile
83.7%
The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative LoadAddr value in a HES file, which is used as an offset in a memcpy operation and leads to a buffer underflow.
Affected configurations
Node
festalonfestalonRange≤0.5.5
ORfestalonfestalonMatch0.5.0
Related
cvelist
cvelist
CVE-2006-4024
2006-08-09 00:00:00
exploitdb
exploitdb
Festalon 0.5 - '.HES' Remote Heap Buffer Overflow
2006-08-07 00:00:00
cve
cve
CVE-2006-4024
2006-08-09 00:04:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
High
EPSS
0.01
Percentile
83.7%
Related for NVD:CVE-2006-4024