4.9
CVE-2014-2597
- EPSS 0.34%
- Veröffentlicht 18.04.2014 22:14:38
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginPCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service (disabled keyboard or crash) via a large input buffer to unspecified IOCTL requests in RACDriver.sys, which triggers a buffer over-read.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Remote-rac ≫ Rac Server Version4.0.4
Remote-rac ≫ Rac Server Version4.0.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.34% | 0.252 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.9 | 3.9 | 6.9 |
AV:L/AC:L/Au:N/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://seclists.org/fulldisclosure/2014/Apr/221
http://secunia.com/advisories/58090
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2597/