PT-2011-5157 · Cast & Crew Entertainment · Final Draft

Nick Freeman · Publicado 2011-12-25 · Atualizado 2012-02-17 · CVE-2011-5002

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Final Draft version 8.0 through 8.01

Description The issue is related to multiple stack-based buffer overflows that can be triggered by remote attackers via a .fdx or .fdxt file containing long elements, including Word, Transition, Location, Extension, SceneIntro, TimeOfDay, and Character. This can lead to the execution of arbitrary code.

Recommendations For Final Draft version 8.0 through 8.01, update to version 8.02 to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-5002

Produtos afetados

Final Draft

Referências · 7

• 🔥 http://exploit-db.com/exploits/18184 · Exploit
• 🔥 https://exploit-db.com/exploits/18184 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-5002 · Nota de Segurança
• http://securityfocus.com/bid/50850 · Nota
• http://osvdb.org/77454 · Nota
• http://secunia.com/advisories/47044 · Aviso do Fabricante
• http://security-assessment.com/files/documents/advisory/Final_Draft-Multiple_Stack_Buffer_Overflows.pdf · Nota