CVE-2011-3488
Published Sep 16, 2011
Last updated 12 years ago
Overview
- Description
- Use-after-free vulnerability in Equis MetaStock 11 and earlier allows remote attackers to execute arbitrary code via a malformed (1) mwc chart, (2) mws chart, (3) mwt template, or (4) mwl layout.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-399
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:equis:metastock:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79E98561-E14E-4800-989E-623E73F2A3A9",
"versionEndIncluding": "11.0"
},
{
"criteria": "cpe:2.3:a:equis:metastock:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3724439B-292B-46EB-A9D8-4A69FE8AF654"
},
{
"criteria": "cpe:2.3:a:equis:metastock:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "836946DA-8740-4AE8-A585-1DCEC0549F7B"
},
{
"criteria": "cpe:2.3:a:equis:metastock:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA3D9E0A-3D50-4576-B9F0-4F5EF50A85DB"
},
{
"criteria": "cpe:2.3:a:equis:metastock:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EE51637-FA04-45FF-AAFF-7CA771E67E70"
},
{
"criteria": "cpe:2.3:a:equis:metastock:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A876212F-03EA-47D0-881B-D6323003E69B"
},
{
"criteria": "cpe:2.3:a:equis:metastock:10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19114644-1F7D-4963-9506-DB36E5A718D7"
}
],
"operator": "OR"
}
]
}
]