PT-2009-1412 · Ayeview · Ayeview

Sun8Hclf · Publicado 2009-01-22 · Atualizado 2017-09-29 · CVE-2008-5937

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions AyeView version 2.20

Description The issue allows user-assisted attackers to cause a denial of service, resulting in memory consumption or application crash, by using a bitmap file with large height and width values.

Recommendations For AyeView version 2.20, consider avoiding the use of bitmap files with excessively large dimensions to prevent denial of service attacks until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-5937

Produtos afetados

Ayeview

Referências · 4

• 🔥 https://exploit-db.com/exploits/6672 · Exploit
• http://securityreason.com/securityalert/4939 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5937 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48183 · Nota