« Volver al listado

CVE-2011-0499

Estado: ModificadaAlta (9.3)—

Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "name" attribute. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Verytools — Videospirit LiteVerytools — Videospirit PRO

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-0499",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-01-20T19:00:09.880",
  "references": [
    {
      "url": "http://secunia.com/advisories/42866",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/42876",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64863",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/42866",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/42876",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64863",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long \"name\" attribute.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en VideoSpirit Pro v.1.6.8.1 y posiblemente en versiones anteriores, lo que permite a atacantes remotos ayudados por un usuario ejecutar código a través de un archivo del proyecto VideoSpirit (.visprj) que contiene un elemento valitem con un atributo largo \"name\". Nota: la procedencia de esta información es desconocida; los detalles han sido obtenidos exclusivamente de la información de terceros."
    }
  ],
  "lastModified": "2026-06-16T23:27:30.827",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:verytools:videospirit_lite:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9452ABA2-8CA3-4F48-99A2-FBA66F725CCF",
              "versionEndIncluding": "1.4.0.1"
            },
            {
              "criteria": "cpe:2.3:a:verytools:videospirit_pro:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B626FACE-626E-489B-BAEC-E9E55267D138",
              "versionEndIncluding": "1.6.8.1"
            },
            {
              "criteria": "cpe:2.3:a:verytools:videospirit_pro:1.68:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5AAD49DD-ACDF-4366-B31B-5A8F94104CBF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}