« Volver al listado

CVE-2008-4396

Estado: ModificadaAlta (9.3)—

Stack-based buffer overflow in Safer Networking FileAlyzer 1.6.0.0 and 1.6.0.4 beta, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via an executable with malformed version data.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Safer Networking — Filealyzer

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-4396",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-10-02T20:37:29.227",
  "references": [
    {
      "url": "http://forums.spybot.info/showthread.php?t=34737",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lostmon.blogspot.com/2008/09/filealyzer-1604-stak-overflow.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.org/0809-advisories/filealyzer-overflow.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/31474",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45516",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://forums.spybot.info/showthread.php?t=34737",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lostmon.blogspot.com/2008/09/filealyzer-1604-stak-overflow.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://packetstormsecurity.org/0809-advisories/filealyzer-overflow.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/31474",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45516",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in Safer Networking FileAlyzer 1.6.0.0 and 1.6.0.4 beta, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via an executable with malformed version data."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer basado en pila en Safer Networking FileAlyzer v1.6.0.0 y v1.6.0.4 beta, y posiblemente otras versiones, permite a atacantes remotos con usuario asistido ejecutar código de su elección a través de un ejecutable con la versión de datos malformada."
    }
  ],
  "lastModified": "2026-06-16T22:57:44.117",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:safer_networking:filealyzer:1.6.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B128A869-7059-4BF6-87D2-E1A2712E8084"
            },
            {
              "criteria": "cpe:2.3:a:safer_networking:filealyzer:1.6.0.4:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A1867CC-BB24-4DFE-B9BD-DD01248AAB0C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}