CVE-2019-5041CWE-121

An exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.Words library, version 18.11.0.0

Critical · published August 21, 2019

CVSS v3.0
9.8
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

An exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.Words library, version 18.11.0.0. A specially crafted doc file can cause a stack-based buffer overflow, resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
9.8 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03282 · 88.4th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2019-08-21T17:01Z
EPSS history
Timeline
  • 21 AUG 17:01Z
    An exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.Words library, version 18.11.0.0
    cvelistv5