Vulnerability Description
Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sixapart | Movabletype | <= 5.2.11 |
Related Weaknesses (CWE)
References
- http://www.debian.org/security/2015/dsa-3227
- http://www.securitytracker.com/id/1032153
- https://movabletype.org/news/2015/04/movable_type_608_and_5213_released_to_closeVendor Advisory
- http://www.debian.org/security/2015/dsa-3227
- http://www.securitytracker.com/id/1032153
- https://movabletype.org/news/2015/04/movable_type_608_and_5213_released_to_closeVendor Advisory
FAQ
What is CVE-2015-0845?
CVE-2015-0845 is a vulnerability with a CVSS score of 7.5 (HIGH). Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related t...
How severe is CVE-2015-0845?
CVE-2015-0845 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-0845?
Check the references section above for vendor advisories and patch information. Affected products include: Sixapart Movabletype.