VULNERABILITY INTELLIGENCE

CVE-2014-0765

CVSS score7.5 HIGH
EPSS probability2.67%
CISA KEVNot currently listed
Published2014-04-12
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

To exploit this vulnerability, the attacker sends data from the GotoCmd argument to control. If the value of the argument is overly long, the static stack buffer can be overflowed. This will allow the attacker to execute arbitrary code remotely.

Weakness classification

  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
  • CWE-121: Stack-based Buffer Overflow

Primary references