CVE-2012-2614

EUVD-2012-2600
Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long string in a version attribute of an ispXCF element in an .xcf file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
Affected Products (NVD)
VendorProductVersion
lattice_semiconductorlattice_diamond_programmer
1.4.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2012-06/0136.html
http://secunia.com/advisories/48431
http://www.coresecurity.com/content/lattice-diamond-programmer-buffer-overflow
http://www.exploit-db.com/exploits/19340
http://archives.neohapsis.com/archives/bugtraq/2012-06/0136.html
http://secunia.com/advisories/48431
http://www.coresecurity.com/content/lattice-diamond-programmer-buffer-overflow
http://www.exploit-db.com/exploits/19340