Lucene search

K
nvd[email protected]NVD:CVE-2009-4195
HistoryDec 04, 2009 - 11:30 a.m.

CVE-2009-4195

2009-12-0411:30:00
CWE-119
web.nvd.nist.gov
5

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.972

Percentile

99.9%

Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
adobeillustratorMatch13.0.0cs4
OR
adobeillustratorMatch14.0.0cs4
VendorProductVersionCPE
adobeillustrator13.0.0cpe:2.3:a:adobe:illustrator:13.0.0:cs4:*:*:*:*:*:*
adobeillustrator14.0.0cpe:2.3:a:adobe:illustrator:14.0.0:cs4:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.972

Percentile

99.9%