Lucene search

K
nvd[email protected]NVD:CVE-2018-18446
HistoryOct 12, 2022 - 9:15 p.m.

CVE-2018-18446

2022-10-1221:15:09
CWE-502
web.nvd.nist.gov
dotpdn paint.net
4.1.2
untrusted data
deserialization
issue

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

68.0%

dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2).

Affected configurations

NVD
Node
dotpdnpaint.netRange<4.1.2

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

68.0%

Related for NVD:CVE-2018-18446