Vulnerability Details : CVE-2015-8039
Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSetupSave method in the STWAxConfig control or (2) SendCustomPacket method in the STWAxConfigNVR control, which trigger an untrusted pointer dereference.
Vulnerability category: Execute code
Products affected by CVE-2015-8039
- cpe:2.3:a:samsung:smartviewer:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-8039
92.32%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-8039
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
References for CVE-2015-8039
-
http://www.zerodayinitiative.com/advisories/ZDI-15-463
ZDI-15-463 | Zero Day Initiative
-
http://www.securityfocus.com/bid/77079
Samsung SmartViewer CVE-2015-8039 Multiple Remote Code Execution Vulnerabilities
-
http://www.zerodayinitiative.com/advisories/ZDI-15-462
ZDI-15-462 | Zero Day Initiative
Jump to