mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
232 lines
8.2 KiB
JSON
232 lines
8.2 KiB
JSON
{
|
|
"id": "CVE-2009-0812",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2009-03-04T17:30:02.657",
|
|
"lastModified": "2018-10-10T19:31:26.457",
|
|
"vulnStatus": "Modified",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions allows remote attackers to execute arbitrary code via a crafted Intel Hex Code (.hex) file. NOTE: some of these details are obtained from third party information."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Desbordamiento de b\u00fafer basado en pila en BreakPoint Software Hex Workshop v4.23, v6.0.1.4603 y otras v6.x y versiones anteriores, permiten a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un fichero Intel Hex Code (.hex) manipulado. NOTA: algunos de los detalles se han obtenido de fuentes de terceros."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "MEDIUM",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "COMPLETE",
|
|
"integrityImpact": "COMPLETE",
|
|
"availabilityImpact": "COMPLETE",
|
|
"baseScore": 9.3
|
|
},
|
|
"baseSeverity": "HIGH",
|
|
"exploitabilityScore": 8.6,
|
|
"impactScore": 10.0,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": true,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": true
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-119"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "6.0.0",
|
|
"matchCriteriaId": "10DED104-0B96-4AED-ACBA-A8F0D10FFCDC"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:1.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "AA15841A-9389-4846-8C1D-18DDC513C50C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.00:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1A6BF4ED-54D1-4252-97A7-BD5DAE30A037"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.01:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "100360DA-9566-411A-968D-EDB58F1A30D6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.10:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "25ECAAA7-CC59-40B7-B800-60E58956A3FE"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.20:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A9E45C25-7A1E-4FCB-B51C-F9A0A7BA0ECA"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.50:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2916C7C9-FE67-49F4-A937-56530680CD0F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.52:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B9C61A13-C7B2-46F0-814B-8C52599F8CBF"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.53:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "09B6CA27-D136-4769-AB4E-C40AAC6A4FA8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.54:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D2A02F57-8428-4355-BF5F-A11A6BCE1F04"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:3.00:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "EBECCF0A-79B0-4C1D-8879-184C78ECAD30"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:3.02:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "70FCF22E-5217-4B64-8960-11D65F21E59B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:3.10:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "20D370D9-6907-4AC2-89CB-D6936728D2DF"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:3.11:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9F49B1C6-C892-49E2-AA22-9DE33609696B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:4.00:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E55B2ACC-13C5-4FF0-8BD1-B143F8A7161B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:4.10:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C136606A-10DB-424C-A230-0E1640778A55"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:4.20:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A4CD53A9-BC06-4307-8009-4CC3AD194168"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:4.21:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "46A12319-9479-493A-88E7-2F07485E0059"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:4.22:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A7353520-10FF-45A8-8B91-26DA53CAA6A1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:4.23:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7854DC8E-B375-40F9-B057-0CEE9D635C04"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:5.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "6FB64D21-9A73-40AA-98F5-6BF5CA03396F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:5.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "AB87CACB-DC30-4508-839C-7BFF9C56BD47"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:5.1.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1434BD6A-F2F4-4A1F-ACE9-600E6DB0A878"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:5.1.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BAD8E03A-2B59-4015-8A46-70B8C7494392"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:5.02:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3F94FBC7-8643-4F08-902F-55B1EFF6F3E3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:6.0.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E702A091-AC4B-4B83-BFE4-D6494A779CAC"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://secunia.com/advisories/34021",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.exploit-db.com/exploits/9550",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/archive/1/501300/100/0/threaded",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/33932",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Exploit"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48970",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "https://www.exploit-db.com/exploits/8121",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |