ByteOS Network

white_dune

Source -

NVD

BOS Name -

N/A

CNA CVEs -

ADP CVEs -

CISA CVEs -

NVD CVEs -

3Vulnerabilities found

CVE-2008-7228

Assigner-MITRE Corporation

View Details

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.32% / 54.80%

7 Day CHG~0.00%

Published-14 Sep, 2009 | 14:00

Updated-16 Sep, 2024 | 23:45

Multiple format string vulnerabilities in White_Dune before 0.29beta851 have unspecified impact and attack vectors, a different vulnerability than CVE-2008-0101.

Vendor-white_dune n/a

Product-white_dune n/a

CWE ID-CWE-134

Use of Externally-Controlled Format String

CVE-2008-0100

Assigner-MITRE Corporation

View Details

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-17.54% / 94.83%

7 Day CHG~0.00%

Published-08 Jan, 2008 | 02:00

Updated-07 Aug, 2024 | 07:32

Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via a long string in a .WRL file.

Vendor-white_dune n/a

Product-white_dune n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-0101

Assigner-MITRE Corporation

View Details

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-3.50% / 87.14%

7 Day CHG~0.00%

Published-08 Jan, 2008 | 02:00

Updated-07 Aug, 2024 | 07:32

Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file.

Vendor-white_dune n/a

Product-white_dune n/a

CWE ID-CWE-20

Improper Input Validation