CVE-2012-2614 Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long strin...
MediumCVSS 6.8
EPSS 4.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long string in a version attribute of an ispXCF element in an .xcf file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lattice semiconductor lattice diamond programmer | = 1.4.2 | No fix listed |
References
- 20120621 CORE-2012-0530 - Lattice Diamond Programmer Buffer Overflow exploit mailing-list
- 48431 third-party-advisory
- www.coresecurity.com exploit
- 19340 exploit