Vulnerabilities (CVE)

Filtered by vendor Kerry Thompson Subscribe
Filtered by product Logsurfer\+
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-3626 2 Drusus, Kerry Thompson 2 Logsurfer, Logsurfer\+ 2024-02-28 7.5 HIGH N/A
Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file.