2 lines
3.4 KiB
JSON
2 lines
3.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"Computerinsel Photoline","vendor":"Talos","versions":[{"status":"affected","version":"20.02"}]}],"source":"talos-cna@cisco.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:pl32:photoline:20.02:*:*:*:*:*:*:*","matchCriteriaId":"F60D6566-A566-4FC8-BEA9-7EFC7E8721A6","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution. An attacker can send specific .GIF file to trigger this vulnerability."},{"lang":"es","value":"Existe una vulnerabilidad de corrupción de memoria en la funcionalidad de análisis sintáctico de los archivos .gif en la versión 20.02 de Computerinsel Photoline. Un archivo .gif especialmente manipulado puede provocar una vulnerabilidad que podría dar lugar a la ejecución de código. Un atacante puede enviar un archivo .gif específico para provocar esta vulnerabilidad."}],"id":"CVE-2017-2880","lastModified":"2026-06-17T01:17:03.200","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":6.8,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":8.6,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"talos-cna@cisco.com","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-10-05T19:29:00.230","references":[{"source":"talos-cna@cisco.com","tags":["Broken Link"],"url":"http://www.securityfocus.com/bid/101188"},{"source":"talos-cna@cisco.com","tags":["Exploit","Technical Description","Third Party Advisory"],"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0387"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"url":"http://www.securityfocus.com/bid/101188"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Technical Description","Third Party Advisory"],"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0387"}],"sourceIdentifier":"talos-cna@cisco.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-119"}],"source":"nvd@nist.gov","type":"Primary"}]}
|