[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2010-4701

Date: (C)2011-01-20   (M)2017-09-19
 
CVSS Score: 7.6Access Vector: NETWORK
Exploitability Subscore: 4.9Access Complexity: HIGH
Impact Subscore: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long record in a Fax Cover Page (.cov) file. NOTE: some of these details are obtained from third party information.

Reference:
SECTRACK-1024925
EXPLOIT-DB-15839
SECUNIA-42747
TA11-102A
http://retrogod.altervista.org/9sg_cov_bof.html

CPE    1
cpe:/o:microsoft:windows_xp::sp3
CWE    1
CWE-119
OVAL    1
oval:org.secpod.oval:def:53

© 2013 SecPod Technologies