8.1
CVE-2018-18224
- EPSS 1.01%
- Veröffentlicht 19.10.2018 22:29:01
- Zuletzt bearbeitet 21.11.2024 03:55:33
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information from process memory or cause a crash.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Opendesign ≫ Drawings Sdk Version2019 Updateupdate1
Oracle ≫ Outside In Technology Version8.5.3
Oracle ≫ Outside In Technology Version8.5.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.01% | 0.764 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.1 | 2.8 | 5.2 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
|
| nvd@nist.gov | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:P
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.