Vulnerabilities > CVE-2009-3930 - Numeric Errors vulnerability in Christos Zoulas File

CVSS 9.3 - CRITICAL

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

christos-zoulas

CWE-189

critical

NVD

Published: 2009-11-10

Updated: 2009-11-24

Summary

Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.

Vulnerable Configurations

Part	Description	Count
Application	Christos_Zoulas Christos Zoulas File 3.30 Christos Zoulas File 3.31 Christos Zoulas File 3.32 Christos Zoulas File 3.33 Christos Zoulas File 3.34 Christos Zoulas File 3.36 Christos Zoulas File 3.37 Christos Zoulas File 3.38 Christos Zoulas File 3.39 Christos Zoulas File 3.40 Christos Zoulas File 3.41 Christos Zoulas File 4.01 Christos Zoulas File 4.02 Christos Zoulas File 4.03 Christos Zoulas File 4.04 Christos Zoulas File 4.06 Christos Zoulas File 4.07 Christos Zoulas File 4.08 Christos Zoulas File 4.09 Christos Zoulas File 4.11 Christos Zoulas File 4.12 Christos Zoulas File 4.13 Christos Zoulas File 4.14 Christos Zoulas File 4.15 Christos Zoulas File 4.16 Christos Zoulas File 4.17 Christos Zoulas File 4.19 Christos Zoulas File 4.20 Christos Zoulas File 4.21 Christos Zoulas File 4.23 Christos Zoulas File 4.24 Christos Zoulas File 4.25 Christos Zoulas File 4.26 Christos Zoulas File 5.00 Christos Zoulas File 5.01	35

Common Weakness Enumeration (CWE)

CWE-189 - Numeric Errors

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References