CVE-2009-0812
Estado: ModificadaAlta (9.3)—
Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions allows remote attackers to execute arbitrary code via a crafted Intel Hex Code (.hex) file. NOTE: some of these details are obtained from third party information.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 9.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 6.90%
- Percentil entre todas las CVEs puntuadas: 94
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-119
Referencias
- http://secunia.com/advisories/34021
- http://www.exploit-db.com/exploits/9550
- http://www.securityfocus.com/archive/1/501300/100/0/threaded
- http://www.securityfocus.com/bid/33932
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48970
- https://www.exploit-db.com/exploits/8121
- http://secunia.com/advisories/34021
- http://www.exploit-db.com/exploits/9550
- http://www.securityfocus.com/archive/1/501300/100/0/threaded
- http://www.securityfocus.com/bid/33932
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48970
- https://www.exploit-db.com/exploits/8121
JSON original (NVD)
Mostrar
{
"id": "CVE-2009-0812",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": true,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-03-04T17:30:02.657",
"references": [
{
"url": "http://secunia.com/advisories/34021",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.exploit-db.com/exploits/9550",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/501300/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/33932",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48970",
"source": "cve@mitre.org"
},
{
"url": "https://www.exploit-db.com/exploits/8121",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/34021",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.exploit-db.com/exploits/9550",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/501300/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/33932",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48970",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.exploit-db.com/exploits/8121",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions allows remote attackers to execute arbitrary code via a crafted Intel Hex Code (.hex) file. NOTE: some of these details are obtained from third party information."
},
{
"lang": "es",
"value": "Desbordamiento de búfer basado en pila en BreakPoint Software Hex Workshop v4.23, v6.0.1.4603 y otras v6.x y versiones anteriores, permiten a atacantes remotos ejecutar código de su elección a través de un fichero Intel Hex Code (.hex) manipulado. NOTA: algunos de los detalles se han obtenido de fuentes de terceros."
}
],
"lastModified": "2026-06-16T23:05:51.987",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10DED104-0B96-4AED-ACBA-A8F0D10FFCDC",
"versionEndIncluding": "6.0.0"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA15841A-9389-4846-8C1D-18DDC513C50C"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A6BF4ED-54D1-4252-97A7-BD5DAE30A037"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "100360DA-9566-411A-968D-EDB58F1A30D6"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25ECAAA7-CC59-40B7-B800-60E58956A3FE"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9E45C25-7A1E-4FCB-B51C-F9A0A7BA0ECA"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2916C7C9-FE67-49F4-A937-56530680CD0F"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.52:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9C61A13-C7B2-46F0-814B-8C52599F8CBF"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.53:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09B6CA27-D136-4769-AB4E-C40AAC6A4FA8"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:2.54:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2A02F57-8428-4355-BF5F-A11A6BCE1F04"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:3.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBECCF0A-79B0-4C1D-8879-184C78ECAD30"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:3.02:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70FCF22E-5217-4B64-8960-11D65F21E59B"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:3.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20D370D9-6907-4AC2-89CB-D6936728D2DF"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:3.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F49B1C6-C892-49E2-AA22-9DE33609696B"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:4.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E55B2ACC-13C5-4FF0-8BD1-B143F8A7161B"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:4.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C136606A-10DB-424C-A230-0E1640778A55"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:4.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4CD53A9-BC06-4307-8009-4CC3AD194168"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:4.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46A12319-9479-493A-88E7-2F07485E0059"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:4.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7353520-10FF-45A8-8B91-26DA53CAA6A1"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:4.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7854DC8E-B375-40F9-B057-0CEE9D635C04"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FB64D21-9A73-40AA-98F5-6BF5CA03396F"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB87CACB-DC30-4508-839C-7BFF9C56BD47"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:5.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1434BD6A-F2F4-4A1F-ACE9-600E6DB0A878"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:5.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAD8E03A-2B59-4015-8A46-70B8C7494392"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:5.02:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F94FBC7-8643-4F08-902F-55B1EFF6F3E3"
},
{
"criteria": "cpe:2.3:a:bpsoft:hex_workshop:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E702A091-AC4B-4B83-BFE4-D6494A779CAC"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}