NVD

Id
15939  
Name
CVE-2010-4701  
Description
Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long record in a Fax Cover Page (.cov) file. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2011-01-20  
Modified Date
2011-10-04  
Seq
2010-4701  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
90329 15939 CVE-2010-4701 oval:org.mitre.oval:def:12689  View
90330 15939 CVE-2010-4701 http://retrogod.altervista.org/9sg_cov_bof.html  View
90331 15939 CVE-2010-4701 15839  View
90332 15939 CVE-2010-4701 1024925  View
90333 15939 CVE-2010-4701 TA11-102A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34783 JVNDB-2011-005025 複数の Windows 製品で使用される Microsoft Windows Fax Services Cover Page Editor の CDrawPoly::Serialize 関数におけるヒープベースのバッファオーバーフローの脆弱性 Windows XP Professional SP3、Server 2003 R2 Enterprise Edition SP2、および Windows 7 Professional の Microsoft Windows Fax Services Cover Page Editor の fxscover.exe の CDrawPoly::Serialize 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-4701 47281 CVE-2010-4701 15939 7.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005025.html 2011-01-20 2012-04-03 View