CVE-2015-2094

{"id": "CVE-2015-2094", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-03-09T14:59:12.497", "references": [{"url": "http://packetstormsecurity.com/files/131069/WebGate-WinRDS-2.0.8-StopSiteAllChannel-Stack-Overflow.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/118905", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/118906", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/118907", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/118908", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/72841", "source": "cve@mitre.org"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-071/", "source": "cve@mitre.org"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-072/", "source": "cve@mitre.org"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-073/", "source": "cve@mitre.org"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-074/", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/36517/", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the (1) PrintSiteImage, (2) PlaySiteAllChannel, (3) StopSiteAllChannel, or (4) SaveSiteImage function."}, {"lang": "es", "value": "Desbordamiento de buffer basado en pila en el control WESPPlayback.WESPPlaybackCtrl.1 en WebGate WinRDS permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de vectores no especificados en la funci\u00f3n (1) PrintSiteImage, (2) PlaySiteAllChannel, (3) StopSiteAllChannel, o (4) SaveSiteImage."}], "lastModified": "2016-11-30T03:01:03.410", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:webgateinc:winrds:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60114F15-FF08-4351-9032-DE07B344DCE0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}