1. Home
  2. CVE Database
  3. CVE-2013-0728
HIGH · 10.0

CVE-2013-0728

Multiple stack-based buffer overflows in NCSAddOn.dll in the ERDAS APOLLO ECWP plugin before 13.00.0001 for Internet Explorer, Firefox, and Chrome allow remote attackers to execute arbitrary code via ...

Vulnerability Description

Multiple stack-based buffer overflows in NCSAddOn.dll in the ERDAS APOLLO ECWP plugin before 13.00.0001 for Internet Explorer, Firefox, and Chrome allow remote attackers to execute arbitrary code via a long property value.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
HexagonErdas Apollo Ecwp13.00.0000

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2013-0728?

CVE-2013-0728 is a vulnerability with a CVSS score of 10.0 (HIGH). Multiple stack-based buffer overflows in NCSAddOn.dll in the ERDAS APOLLO ECWP plugin before 13.00.0001 for Internet Explorer, Firefox, and Chrome allow remote attackers to execute arbitrary code via ...

How severe is CVE-2013-0728?

CVE-2013-0728 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-0728?

Check the references section above for vendor advisories and patch information. Affected products include: Hexagon Erdas Apollo Ecwp.