CVE-2010-4743

2011-02-1819:00:14

CWE-787

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.092

Percentile

94.8%

JSON

Heap-based buffer overflow in the getarena function in abc2ps.c in abcm2ps before 5.9.13 might allow remote attackers to execute arbitrary code via a crafted ABC file, a different vulnerability than CVE-2010-3441. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

moinejfabcm2psRange<5.9.13

Node

fedoraprojectfedoraMatch13

fedoraprojectfedoraMatch14

VendorProductVersionCPE
moinejfabcm2ps*cpe:2.3:a:moinejf:abcm2ps:*:*:*:*:*:*:*:*
fedoraprojectfedora13cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*
fedoraprojectfedora14cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moinejf	abcm2ps	*	cpe:2.3:a:moinejf:abcm2ps::::::::
fedoraproject	fedora	13	cpe:2.3:o:fedoraproject:fedora:13:::::::*
fedoraproject	fedora	14	cpe:2.3:o:fedoraproject:fedora:14:::::::*