7.9

CVE-2011-4874

Use-after-free vulnerability in MICROSYS PROMOTIC before 8.1.7 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (data corruption and application crash) via a crafted project (aka .pra) file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsys ≫ Promotic Version <= 8.1.6
Microsys ≫ Promotic Version 8.0.0
Microsys ≫ Promotic Version 8.0.1
Microsys ≫ Promotic Version 8.0.2
Microsys ≫ Promotic Version 8.0.3
Microsys ≫ Promotic Version 8.0.4
Microsys ≫ Promotic Version 8.0.5
Microsys ≫ Promotic Version 8.0.6
Microsys ≫ Promotic Version 8.0.7
Microsys ≫ Promotic Version 8.0.8
Microsys ≫ Promotic Version 8.0.9
Microsys ≫ Promotic Version 8.0.10
Microsys ≫ Promotic Version 8.0.11
Microsys ≫ Promotic Version 8.0.12
Microsys ≫ Promotic Version 8.0.13
Microsys ≫ Promotic Version 8.1.0
Microsys ≫ Promotic Version 8.1.1
Microsys ≫ Promotic Version 8.1.2
Microsys ≫ Promotic Version 8.1.3
Microsys ≫ Promotic Version 8.1.4
Microsys ≫ Promotic Version 8.1.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.51% 0.723
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.9 5.5 10
AV:A/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.promotic.eu/en/pmdoc/News.htm#ver80107
http://www.securityfocus.com/bid/52988
http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-03.pdf
US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/74846