Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-2294
HistoryJul 05, 2009 - 12:00 a.m.

CVE-2009-2294

2009-07-0500:00:00
ubuntu.com
ubuntu.com
11

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.047 Low

EPSS

Percentile

92.7%

Integer overflow in the Png_datainfo_callback function in Dillo 2.1 and
earlier allows remote attackers to cause a denial of service (crash) and
possibly execute arbitrary code via a PNG image with crafted (1) width or
(2) height values.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.047 Low

EPSS

Percentile

92.7%