Vulnerability Details : CVE-2015-7860
Stack-based buffer overflow in the agent in Persistent Accelerite Radia Client Automation (formerly HP Client Automation), possibly before 9.1, allows remote attackers to execute arbitrary code by sending a large amount of data in an environment that lacks relationship-based firewalling.
Vulnerability category: OverflowExecute code
Products affected by CVE-2015-7860
- cpe:2.3:a:accelerite:radia_client_automation:7.9:*:*:*:*:*:*:*
- cpe:2.3:a:accelerite:radia_client_automation:8.1:*:*:*:*:*:*:*
- cpe:2.3:a:accelerite:radia_client_automation:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:accelerite:radia_client_automation:9.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-7860
14.16%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 94 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-7860
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
CWE ids for CVE-2015-7860
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-7860
-
http://www.securitytracker.com/id/1033861
Persistent Systems Accelerite Radia Client Automation (HP Client Automation) Bugs Let Remote Users Execute Arbitrary Code - SecurityTracker
-
http://www.securityfocus.com/bid/75966
HP Client Automation Remote Code Execution and Stack Buffer Overflow Vulnerabilities
-
http://www.kb.cert.org/vuls/id/966927
VU#966927 - HP Client Automation and Radia Client Automation is vulnerable to remote code execution
-
http://zerodayinitiative.com/advisories/ZDI-15-363/
ZDI-15-363 | Zero Day Initiative
Jump to