VulnerabilityModified
CVE-2008-5282
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with a long HREF attribute, and (2) a DIV tag with a long id attribute.
HIGH 10.0EPSS 17.6%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 17.6%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with a long HREF attribute, and (2) a DIV tag with a long id attribute.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 17.64% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- w3c/amaya web browser
- Source
- cve@mitre.org
References
- http://osvdb.org/50282
- http://osvdb.org/50283
- http://secunia.com/advisories/32848Vendor Advisory
- http://securityreason.com/securityalert/4657
- http://www.bmgsec.com.au/advisory/40/Exploit
- http://www.bmgsec.com.au/advisory/41/Exploit
- http://www.securityfocus.com/archive/1/498578/100/0/threaded
- http://www.securityfocus.com/archive/1/498583/100/0/threaded
- http://www.securityfocus.com/bid/32442
- http://www.vupen.com/english/advisories/2008/3255
- http://osvdb.org/50282
- http://osvdb.org/50283
- http://secunia.com/advisories/32848Vendor Advisory
- http://securityreason.com/securityalert/4657
- http://www.bmgsec.com.au/advisory/40/Exploit
- http://www.bmgsec.com.au/advisory/41/Exploit
- http://www.securityfocus.com/archive/1/498578/100/0/threaded
- http://www.securityfocus.com/archive/1/498583/100/0/threaded
- http://www.securityfocus.com/bid/32442
- http://www.vupen.com/english/advisories/2008/3255
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.