Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-37282
HistoryJan 08, 2024 - 3:15 p.m.

Cross site scripting

2024-01-0815:15:00
PRIOn knowledge base
www.prio-n.com
6
cross site scripting
out-of-bounds write
vzt lzma_read dmem
arbitrary code execution
malicious file

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.2%

An out-of-bounds write vulnerability exists in the VZT LZMA_Read dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.

CPENameOperatorVersion
gtkwaveeq3.3.115

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.2%