CVE-2006-4024

The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service (crash) and possibly…

published August 9, 2006

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative LoadAddr value in a HES file, which is used as an offset in a memcpy operation and leads to a buffer underflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05101 · 92.3th percentile
Published
2006-08-09T00:00Z
EPSS history
Timeline
  • 09 AUG 00:00Z
    The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service (crash) and possibly…
    cvelistv5