CVE-2014-9707

EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a

published March 31, 2015

CVSS
—
EPSS
28%
Percentile
98.1
In the wild
Unconfirmed
What it is

EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remote attackers to conduct directory traversal attacks, cause a denial of service (heap-based buffer overflow and crash), or possibly execute arbitrary code via a crafted URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.28237 · 98.1th percentile
Published
2015-03-31T14:00Z
EPSS history
Timeline
  • 31 MAR 14:00Z
    EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a
    cvelistv5