CVE-2013-4986

Exploit

EPSS 4.08%
Veröffentlicht 04.10.2013 20:55:03
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

NVD 21 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Iconcool ≫ Pdfcool Studio Update build130330 Version <= 3.32

Iconcool ≫ Pdfcool Studio Version 2.0 Update build110427

Iconcool ≫ Pdfcool Studio Version 2.0 Update build110502

Iconcool ≫ Pdfcool Studio Version 2.0 Update build110508

Iconcool ≫ Pdfcool Studio Version 2.0 Update build110510

Iconcool ≫ Pdfcool Studio Version 2.0 Update build110512

Iconcool ≫ Pdfcool Studio Version 2.5 Update build120405

Iconcool ≫ Pdfcool Studio Version 2.6 Update build120405

Iconcool ≫ Pdfcool Studio Version 2.7 Update build120405

Iconcool ≫ Pdfcool Studio Version 2.8 Update build120518

Iconcool ≫ Pdfcool Studio Version 2.10 Update build110519

Iconcool ≫ Pdfcool Studio Version 2.10 Update build110523

Iconcool ≫ Pdfcool Studio Version 2.12 Update build110528

Iconcool ≫ Pdfcool Studio Version 2.14 Update build110608

Iconcool ≫ Pdfcool Studio Version 2.16 Update build110612

Iconcool ≫ Pdfcool Studio Version 2.20 Update build110707

Iconcool ≫ Pdfcool Studio Version 2.24 Update build1110801

Iconcool ≫ Pdfcool Studio Version 2.26 Update build110823

Iconcool ≫ Pdfcool Studio Version 2.30 Update build110920

Iconcool ≫ Pdfcool Studio Version 2.40 Update build111016

Iconcool ≫ Pdfcool Studio Version 3.0 Update build121022

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.08%	0.894

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://archives.neohapsis.com/archives/bugtraq/2013-10/0002.html

Exploit

http://osvdb.org/97959

http://packetstormsecurity.com/files/123476

Exploit

http://secunia.com/advisories/55058

Vendor Advisory

http://www.coresecurity.com/advisories/pdfcool-studio-buffer-overflow-vulnerability

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2013-4986

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-4986

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-4986

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-4986