CVE-2008-5282
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.6 High
AI Score
Confidence
Low
0.747 High
EPSS
Percentile
98.2%
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with a long HREF attribute, and (2) a DIV tag with a long id attribute.
Affected configurations
References
osvdb.org/50282
osvdb.org/50283
secunia.com/advisories/32848
securityreason.com/securityalert/4657
www.bmgsec.com.au/advisory/40/
www.bmgsec.com.au/advisory/41/
www.securityfocus.com/archive/1/498578/100/0/threaded
www.securityfocus.com/archive/1/498583/100/0/threaded
www.securityfocus.com/bid/32442
www.vupen.com/english/advisories/2008/3255
Related
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.6 High
AI Score
Confidence
Low
0.747 High
EPSS
Percentile
98.2%