7.8

CVE-2021-28953

The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
C/c++ Advanced Lint Project ≫ C/c++ Advanced Lint SwPlatformvisual_studio_code Version < 1.9.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.01% 0.584
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

https://github.com/jbenden/vscode-c-cpp-flylint/compare/v1.8.2...v1.9.0
Patch
Third Party Advisory
https://marketplace.visualstudio.com/items?itemName=jbenden.c-cpp-flylint
Third Party Advisory
Product
https://vuln.ryotak.me/advisories/16
Third Party Advisory