Vulnerabilities > CVE-2011-3488 - Resource Management Errors vulnerability in Equis Metastock

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
equis
CWE-399
critical
exploit available

Summary

Use-after-free vulnerability in Equis MetaStock 11 and earlier allows remote attackers to execute arbitrary code via a malformed (1) mwc chart, (2) mws chart, (3) mwt template, or (4) mwl layout.

Common Weakness Enumeration (CWE)

Exploit-Db

descriptionEquis MetaStock <= 11 Use After Free. CVE-2011-3488. Dos exploit for windows platform
idEDB-ID:17836
last seen2016-02-02
modified2011-09-14
published2011-09-14
reporterLuigi Auriemma
sourcehttps://www.exploit-db.com/download/17836/
titleEquis MetaStock <= 11 Use After Free