NVD

Id
50072  
Name
CVE-2009-2850  
Description
Multiple buffer overflows in NASA Common Data Format (CDF) allow context-dependent attackers to execute arbitrary code, as demonstrated using (1) an array index error in the ReadAEDRList64 function, and other errors in the (2) SearchForRecord_r_64, (3) LastRecord64, (4) CDFsel64, and other unspecified functions.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-08-18  
Modified Date
2009-08-21  
Seq
2009-2850  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253378 50072 CVE-2009-2850 http://cdf.gsfc.nasa.gov/html/CDF_changesnote2.html  View
253379 50072 CVE-2009-2850 http://cdf.gsfc.nasa.gov/html/CDF_v330.html  View
253380 50072 CVE-2009-2850 [oss-security] 20090814 CVE request: Common Data Format (CDF) library multiple heap-based buffer overflows  View
253381 50072 CVE-2009-2850 20090721 [INFIGO-2009-07-09]: NASA Common Data Format remote buffer overflow(s)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43873 JVNDB-2009-004880 NASA CDF におけるバッファオーバーフローの脆弱性 NASA Common Data Format (CDF) には、バッファオーバーフローの脆弱性が存在します。 CVE-2009-2850 40281 CVE-2009-2850 50072 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004880.html 2009-08-18 2012-09-25 View