PT-2024-10546 · Mikexstudios · Xcomic

Kevin · Published 2024-10-17 · Updated 2024-11-14 · CVE-2005-10003

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions mikexstudios Xcomic versions up to 0.8.2

Description A critical vulnerability has been found in mikexstudios Xcomic, affecting an unknown part of the software. The manipulation of the cmd argument leads to os command injection, allowing for remote attacks. The complexity of an attack is rather high, and the exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.

Recommendations For versions up to 0.8.2, upgrade to version 0.8.3 to address this issue. As a temporary workaround, consider restricting the use of the cmd argument to minimize the risk of exploitation.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2005-10003

Affected Products

Xcomic

References · 9

• 🔥 http://xcomic.mikexstudios.com/forum/viewtopic.php?id=130 · Exploit
• https://github.com/mikexstudios/xcomic/commit/6ed8e3cc336e29f09c7e791863d0559939da98bf · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-10003 · Security Note
• https://github.com/mikexstudios/xcomic/releases/tag/v0.8.3 · Patch
• https://t.me/cvedetector/8186 · Telegram Post
• https://vuldb.com/?id.280359 · Note
• https://t.me/cvenotify/101738 · Telegram Post
• https://vuldb.com/?ctiid.280359 · Note
• https://web.archive.org/web/20071218144304/http://xcomic.mikexstudios.com/forum/viewtopic.php?id=130 · Note