CVE-2013-0728 Multiple stack-based buffer overflows in NCSAddOn.dll in the ERDAS APOLLO ECWP plugin before 13.00.0001 for Internet Explorer, Firefox, and Chrome allow remote attackers to execute arbitrary code via....
HighCVSS 10.0
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in NCSAddOn.dll in the ERDAS APOLLO ECWP plugin before 13.00.0001 for Internet Explorer, Firefox, and Chrome allow remote attackers to execute arbitrary code via a long property value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hexagon erdas apollo ecwp | = 13.00.0000 | No fix listed |
References
- 51647 third-party-advisory vendor-advisory