PT-2013-5545

CVE-2013-5447

·

Publicado

2013-12-10

·

Atualizado

2017-08-29

Descrição por

CVSS 2.0
6.8
Média
MétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions IBM Forms Viewer versions 4.x before 4.0.0.3 IBM Forms Viewer versions 8.x before 8.0.1.1
Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved via an XFDL form with a long fontname value.
Recommendations For versions 4.x before 4.0.0.3, update to version 4.0.0.3 or later. For versions 8.x before 8.0.1.1, update to version 8.0.1.1 or later.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Identificadores relacionados
CVE-2013-5447
ZDI-13-274
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com