PT-2011-5157 · Cast & Crew Entertainment · Final Draft

Nick Freeman · Published 2011-12-25 · Updated 2012-02-17 · CVE-2011-5002

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Final Draft version 8.0 through 8.01

Description The issue is related to multiple stack-based buffer overflows that can be triggered by remote attackers via a .fdx or .fdxt file containing long elements, including Word, Transition, Location, Extension, SceneIntro, TimeOfDay, and Character. This can lead to the execution of arbitrary code.

Recommendations For Final Draft version 8.0 through 8.01, update to version 8.02 to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-5002

Affected Products

Final Draft

References · 7

• 🔥 http://exploit-db.com/exploits/18184 · Exploit
• 🔥 https://exploit-db.com/exploits/18184 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-5002 · Security Note
• http://secunia.com/advisories/47044 · Vendor Advisory
• http://securityfocus.com/bid/50850 · Note
• http://osvdb.org/77454 · Note
• http://security-assessment.com/files/documents/advisory/Final_Draft-Multiple_Stack_Buffer_Overflows.pdf · Note