CVE-2022-29886CWE-680

An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files

High · published August 5, 2022

CVSS v3.0
7.3
EPSS
0%
Percentile
39.3
In the wild
Unconfirmed
What it is

An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE file can lead to a heap buffer overflow, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
7.3 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00465 · 39.3th percentile
Weakness
CWE-680 · Integer Overflow to Buffer Overflow
Published
2022-08-05T21:20Z
EPSS history
Timeline
  • 05 AUG 21:20Z
    An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files
    cvelistv5