CVE-2015-5309

Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of service (memory corruption) or possibly execute…

published December 7, 2015

CVSS
—
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an ECH (erase characters) escape sequence with a large parameter value, which triggers a buffer underflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03467 · 88.9th percentile
Published
2015-12-07T20:00Z
EPSS history
Timeline
  • 07 DEC 20:00Z
    Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of service (memory corruption) or possibly execute…
    cvelistv5