Vulnerability Description
HNB Organizer 1.9.18-10 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -rc command-line parameter. Attackers can craft a malicious input string exceeding 108 bytes containing shellcode and a return address to overwrite the stack and achieve code execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hnb Project | Hierarchical Notebook | <= 1.9.18-10 |
Related Weaknesses (CWE)
References
- http://hnb.sourceforge.net/Product
- https://www.exploit-db.com/exploits/40025ExploitVDB Entry
- https://www.vulncheck.com/advisories/hnb-organizer-10-local-buffer-overflow-via-Third Party Advisory
FAQ
What is CVE-2016-20045?
CVE-2016-20045 is a vulnerability with a CVSS score of 8.4 (HIGH). HNB Organizer 1.9.18-10 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -rc command-line parameter. Attac...
How severe is CVE-2016-20045?
CVE-2016-20045 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-20045?
Check the references section above for vendor advisories and patch information. Affected products include: Hnb Project Hierarchical Notebook.