Lucene search

K
nvd[email protected]NVD:CVE-2008-3702
HistoryAug 15, 2008 - 8:41 p.m.

CVE-2008-3702

2008-08-1520:41:00
CWE-119
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.142 Low

EPSS

Percentile

95.8%

Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as used in products such as SpeedBit Download Accelerator Plus (DAP) 8.6, allow remote attackers to execute arbitrary code via a long argument to the (1) ReadGIF or (2) ReadGIF2 method.

Affected configurations

NVD
Node
jcomsoftanigifMatch1.12
OR
jcomsoftanigifMatch2.47
Node
speedbitdownload_accelerator_plusMatch8.6

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.142 Low

EPSS

Percentile

95.8%

Related for NVD:CVE-2008-3702