Lucene search

K
nvd[email protected]NVD:CVE-2013-0728
HistoryApr 25, 2013 - 3:36 a.m.

CVE-2013-0728

2013-04-2503:36:12
CWE-119
web.nvd.nist.gov
4

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.0%

Multiple stack-based buffer overflows in NCSAddOn.dll in the ERDAS APOLLO ECWP plugin before 13.00.0001 for Internet Explorer, Firefox, and Chrome allow remote attackers to execute arbitrary code via a long property value.

Affected configurations

NVD
Node
hexagonerdas_apollo_ecwpMatch13.00.0000-chrome
OR
hexagonerdas_apollo_ecwpMatch13.00.0000-firefox
OR
hexagonerdas_apollo_ecwpMatch13.00.0000-internet_explorer

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.0%

Related for NVD:CVE-2013-0728