Lucene search

K
nvd[email protected]NVD:CVE-2012-0977
HistoryFeb 02, 2012 - 5:55 p.m.

CVE-2012-0977

2012-02-0217:55:01
CWE-119
web.nvd.nist.gov
3

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

High

EPSS

0.046

Percentile

92.6%

Stack-based buffer overflow in jp2_x.dll in LuraWave JP2 ActiveX Control 2.1.5.5 and other versions before 2.1.5.11 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.

Affected configurations

Nvd
Node
luratechlurawave_jp2_activex_controlMatch2.1.5.5
VendorProductVersionCPE
luratechlurawave_jp2_activex_control2.1.5.5cpe:2.3:a:luratech:lurawave_jp2_activex_control:2.1.5.5:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

High

EPSS

0.046

Percentile

92.6%

Related for NVD:CVE-2012-0977