Lucene search
HistoryDec 19, 2022 - 6:15 p.m.
CVE-2022-43289
deark v.1.6.2
stack overflow
vulnerability
do_prism_read_palette
atari-img.
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.2%
Deark v.1.6.2 was discovered to contain a stack overflow via the do_prism_read_palette() function at /modules/atari-img.c.
Affected configurations
Node
entropyminedearkMatch1.6.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| entropymine | deark | 1.6.2 | cpe:2.3:a:entropymine:deark:1.6.2:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-43289
2022-12-19 00:00:00
osv
osv
CVE-2022-43289
2022-12-19 18:15:11
cve
cve
CVE-2022-43289
2022-12-19 18:15:11
prion
prion
Stack overflow
2022-12-19 18:15:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.2%
Related for NVD:CVE-2022-43289