CVE-2011-0651 in Iconfidant SSL Server

Riassunto

di MITRE

Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 26/01/2011
• Divulgazione: 28/01/2011
• Moderazione: accettato
• Voce: VDB-56250
• CPE: pronto
• CWE: CWE-119 (confermato)
• CVSS: 7.3 (VulDB)
• EPSS: 0.04891
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-0651
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-0651
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-0651/