A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a long name attribute of a classify element.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a long name attribute of a classify element.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://www.exploit-db.com/exploits/41771/ | exploit x_refsource_EXPLOIT-DB |
| https://www.exploit-db.com/exploits/43875/ | exploit x_refsource_EXPLOIT-DB |
| https://www.exploit-db.com/exploits/44157/ | exploit x_refsource_EXPLOIT-DB |
| https://www.exploit-db.com/exploits/41773/ | exploit x_refsource_EXPLOIT-DB |
| http://www.dupscout.com/news.html | x_refsource_CONFIRM |
| http://www.diskpulse.com/news.html | x_refsource_CONFIRM |
| http://www.diskboss.com/news.html | x_refsource_CONFIRM |
| http://www.vxsearch.com/news.html | x_refsource_CONFIRM |
| http://www.disksorter.com/news.html | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/97237 | vdb-entry x_refsource_BID |
| https://www.exploit-db.com/exploits/41772/ | exploit x_refsource_EXPLOIT-DB |
| http://www.disksavvy.com/news.html | x_refsource_CONFIRM |
| http://www.syncbreeze.com/news.html | x_refsource_CONFIRM |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://www.exploit-db.com/exploits/41771/ | exploit x_refsource_EXPLOIT-DB x_transferred |
| https://www.exploit-db.com/exploits/43875/ | exploit x_refsource_EXPLOIT-DB x_transferred |
| https://www.exploit-db.com/exploits/44157/ | exploit x_refsource_EXPLOIT-DB x_transferred |
| https://www.exploit-db.com/exploits/41773/ | exploit x_refsource_EXPLOIT-DB x_transferred |
| http://www.dupscout.com/news.html | x_refsource_CONFIRM x_transferred |
| http://www.diskpulse.com/news.html | x_refsource_CONFIRM x_transferred |
| http://www.diskboss.com/news.html | x_refsource_CONFIRM x_transferred |
| http://www.vxsearch.com/news.html | x_refsource_CONFIRM x_transferred |
| http://www.disksorter.com/news.html | x_refsource_CONFIRM x_transferred |
| http://www.securityfocus.com/bid/97237 | vdb-entry x_refsource_BID x_transferred |
| https://www.exploit-db.com/exploits/41772/ | exploit x_refsource_EXPLOIT-DB x_transferred |
| http://www.disksavvy.com/news.html | x_refsource_CONFIRM x_transferred |
| http://www.syncbreeze.com/news.html | x_refsource_CONFIRM x_transferred |
A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a long name attribute of a classify element.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.0 | 7.8 | HIGH | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| Primary | 2.0 | 6.8 | MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| Hyperlink | Source | Resource |
|---|---|---|
| http://www.diskboss.com/news.html | cve@mitre.org | N/A |
| http://www.diskpulse.com/news.html | cve@mitre.org | N/A |
| http://www.disksavvy.com/news.html | cve@mitre.org | N/A |
| http://www.disksorter.com/news.html | cve@mitre.org | N/A |
| http://www.dupscout.com/news.html | cve@mitre.org | N/A |
| http://www.securityfocus.com/bid/97237 | cve@mitre.org | Third Party Advisory VDB Entry |
| http://www.syncbreeze.com/news.html | cve@mitre.org | N/A |
| http://www.vxsearch.com/news.html | cve@mitre.org | N/A |
| https://www.exploit-db.com/exploits/41771/ | cve@mitre.org | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/41772/ | cve@mitre.org | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/41773/ | cve@mitre.org | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/43875/ | cve@mitre.org | N/A |
| https://www.exploit-db.com/exploits/44157/ | cve@mitre.org | N/A |
| http://www.diskboss.com/news.html | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.diskpulse.com/news.html | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.disksavvy.com/news.html | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.disksorter.com/news.html | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.dupscout.com/news.html | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.securityfocus.com/bid/97237 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| http://www.syncbreeze.com/news.html | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.vxsearch.com/news.html | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| https://www.exploit-db.com/exploits/41771/ | af854a3a-2127-422b-91ae-364da2661108 | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/41772/ | af854a3a-2127-422b-91ae-364da2661108 | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/41773/ | af854a3a-2127-422b-91ae-364da2661108 | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/43875/ | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| https://www.exploit-db.com/exploits/44157/ | af854a3a-2127-422b-91ae-364da2661108 | N/A |