CVE-2002-0450 Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe.
HighCVSS 10.0
EPSS 5.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| talentsoft web+ server | = 4.6 | No fix listed |
| talentsoft web+ server | = 5.0 | No fix listed |
References
- 20020313 2nd Buffer Overflow in Talentsoft's Web+ (#NISR13032002) mailing-list
- webplus-wml-bo(8446) vdb-entry
- 4282 patch vdb-entry vendor-advisory
- www.talentsoft.com