CVE-2006-4024
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
09/08/2006
Last modified:
08/03/2011
Description
The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative LoadAddr value in a HES file, which is used as an offset in a memcpy operation and leads to a buffer underflow.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:festalon:festalon:*:*:*:*:*:*:*:* | 0.5.5 (including) | |
cpe:2.3:a:festalon:festalon:0.5.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page