VULNERABILITY INTELLIGENCE
CVE-2023-6362
CVSS score7.3 HIGH
EPSS probability0.18%
CISA KEVNot currently listed
Published2024-10-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Description
A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlling the Structured Exception Handler (SEH) registers. This could allow attackers to execute arbitrary code via a long filename argument.
Weakness classification
- cve-coordination@incibe.es: CWE-119