PT-2009-1412 · Ayeview · Ayeview

Sun8Hclf · Published 2009-01-22 · Updated 2017-09-29 · CVE-2008-5937

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions AyeView version 2.20

Description The issue allows user-assisted attackers to cause a denial of service, resulting in memory consumption or application crash, by using a bitmap file with large height and width values.

Recommendations For AyeView version 2.20, consider avoiding the use of bitmap files with excessively large dimensions to prevent denial of service attacks until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-5937

Affected Products

Ayeview

References · 4

• 🔥 https://exploit-db.com/exploits/6672 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5937 · Security Note
• http://securityreason.com/securityalert/4939 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48183 · Note