CVE-2017-15011 - Vulnerability Details

Vendors	Products
Qt	Qt

Link	Providers
https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf
https://www.youtube.com/watch?v=m6zISgWPGGY

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-10-03T20:00:00Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf"}, {"tags": ["x_refsource_MISC"], "url": "https://www.youtube.com/watch?v=m6zISgWPGGY"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-15011", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf", "refsource": "MISC", "url": "https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf"}, {"name": "https://www.youtube.com/watch?v=m6zISgWPGGY", "refsource": "MISC", "url": "https://www.youtube.com/watch?v=m6zISgWPGGY"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T19:42:22.330Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.youtube.com/watch?v=m6zISgWPGGY"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-15011", "datePublished": "2017-10-03T20:00:00Z", "dateReserved": "2017-10-03T00:00:00Z", "dateUpdated": "2024-09-16T17:22:41.394Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-10-03T20:00:00Z (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://www.youtube.com/watch?v=m6zISgWPGGY (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

ID : CVE-2017-15011 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf (string)

refsource : MISC (string)

url : https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf (string)

}

1 : { »

name : https://www.youtube.com/watch?v=m6zISgWPGGY (string)

refsource : MISC (string)

url : https://www.youtube.com/watch?v=m6zISgWPGGY (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T19:42:22.330Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://www.youtube.com/watch?v=m6zISgWPGGY (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2017-15011 (string)

datePublished : 2017-10-03T20:00:00Z (string)

dateReserved : 2017-10-03T00:00:00Z (string)

dateUpdated : 2024-09-16T17:22:41.394Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:qt:qt:5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "03C7E11D-AA2C-48BB-8C50-B04E5CD3A7C5", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "E30B4386-B419-46B7-945F-C04F79600708", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "3E42429B-0123-428E-AD62-23000CDF7343", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "2EE36CAC-6DB0-4061-AC83-AF12A30F2EFD", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "E2980C52-9843-4A39-B164-76E9583F2D7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "0AE4473E-33BB-4953-9FC5-B3EE503A19E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "DA1E6864-005E-4843-8D76-AF7D687CF991", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "FCC41EE4-29DE-4F86-AEA5-179F6AC9F24B", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "F663AA25-2910-4D31-AD72-8BC8F76E9AE0", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "7DD2FCA0-F628-4164-8D32-8191A3004AFD", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "F7AA598B-B954-4389-AEC4-6B8E7762D507", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "C5F566F5-FB40-4F63-BF93-C9253A828B13", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.10.1:*:*:*:*:*:*:*", "matchCriteriaId": "BD5483AF-66FC-411D-A529-16C5CC8BD8A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.11.0:*:*:*:*:*:*:*", "matchCriteriaId": "0C6827E6-7B15-423D-89C2-46B5E2D35961", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.11.1:*:*:*:*:*:*:*", "matchCriteriaId": "58551C4F-EDA2-4AA3-9C5D-6FDF88C5746F", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.11.2:*:*:*:*:*:*:*", "matchCriteriaId": "B5CCC1DB-3BA9-48CB-ADEE-F1C74C88CC08", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.11.3:*:*:*:*:*:*:*", "matchCriteriaId": "9024B9F9-90B8-494F-950E-955E62A3C872", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.12.0:*:*:*:*:*:*:*", "matchCriteriaId": "B54B9182-F8A0-45AA-99A8-A7424A7C34E1", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.12.1:*:*:*:*:*:*:*", "matchCriteriaId": "B63018D9-848B-4901-9DC9-CE6BBF0C2CDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.12.2:*:*:*:*:*:*:*", "matchCriteriaId": "1DE2DA92-F05B-426C-8CE7-6DCC6AF6461D", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.12.3:*:*:*:*:*:*:*", "matchCriteriaId": "3E4018AD-55DB-4C13-A26B-ED1564E4C501", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.12.4:*:*:*:*:*:*:*", "matchCriteriaId": "6EC8E8B7-299B-4E76-9DC7-8482BA357B5E", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.13.0:*:*:*:*:*:*:*", "matchCriteriaId": "FD5AC67C-2634-49DB-9F97-C27498047C1A", "vulnerable": true}, {"criteria": "cpe:2.3:a:qt:qt:5.14.0:*:*:*:*:*:*:*", "matchCriteriaId": "F8F2A2AC-F3DE-49E3-B0AF-3953ABD1C269", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string."}, {"lang": "es", "value": "Las tuber\u00edas nombradas en qtsingleapp en QT 5.x, tal y como se usan en qBittorrent y SugarSync, est\u00e1n configuradas para que se puedan acceder de manera remota y permitan que atacantes remotos provoquen una denegaci\u00f3n de servicio (cierre inesperado de la aplicaci\u00f3n) mediante una cadena no especificada."}], "id": "CVE-2017-15011", "lastModified": "2024-11-21T03:13:55.940", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-10-04T01:29:03.433", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://www.youtube.com/watch?v=m6zISgWPGGY"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://www.youtube.com/watch?v=m6zISgWPGGY"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:qt:qt:5.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 03C7E11D-AA2C-48BB-8C50-B04E5CD3A7C5 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:qt:qt:5.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : E30B4386-B419-46B7-945F-C04F79600708 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:qt:qt:5.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 3E42429B-0123-428E-AD62-23000CDF7343 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:qt:qt:5.2.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 2EE36CAC-6DB0-4061-AC83-AF12A30F2EFD (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:qt:qt:5.3.0:*:*:*:*:*:*:* (string)

matchCriteriaId : E2980C52-9843-4A39-B164-76E9583F2D7E (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:qt:qt:5.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 0AE4473E-33BB-4953-9FC5-B3EE503A19E3 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:qt:qt:5.5.0:*:*:*:*:*:*:* (string)

matchCriteriaId : DA1E6864-005E-4843-8D76-AF7D687CF991 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:qt:qt:5.6.0:*:*:*:*:*:*:* (string)

matchCriteriaId : FCC41EE4-29DE-4F86-AEA5-179F6AC9F24B (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:qt:qt:5.7.0:*:*:*:*:*:*:* (string)

matchCriteriaId : F663AA25-2910-4D31-AD72-8BC8F76E9AE0 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 7DD2FCA0-F628-4164-8D32-8191A3004AFD (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:qt:qt:5.9.0:*:*:*:*:*:*:* (string)

matchCriteriaId : F7AA598B-B954-4389-AEC4-6B8E7762D507 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:qt:qt:5.10.0:*:*:*:*:*:*:* (string)

matchCriteriaId : C5F566F5-FB40-4F63-BF93-C9253A828B13 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:qt:qt:5.10.1:*:*:*:*:*:*:* (string)

matchCriteriaId : BD5483AF-66FC-411D-A529-16C5CC8BD8A5 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:qt:qt:5.11.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 0C6827E6-7B15-423D-89C2-46B5E2D35961 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:qt:qt:5.11.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 58551C4F-EDA2-4AA3-9C5D-6FDF88C5746F (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:qt:qt:5.11.2:*:*:*:*:*:*:* (string)

matchCriteriaId : B5CCC1DB-3BA9-48CB-ADEE-F1C74C88CC08 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:qt:qt:5.11.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 9024B9F9-90B8-494F-950E-955E62A3C872 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:qt:qt:5.12.0:*:*:*:*:*:*:* (string)

matchCriteriaId : B54B9182-F8A0-45AA-99A8-A7424A7C34E1 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:qt:qt:5.12.1:*:*:*:*:*:*:* (string)

matchCriteriaId : B63018D9-848B-4901-9DC9-CE6BBF0C2CDC (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:qt:qt:5.12.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 1DE2DA92-F05B-426C-8CE7-6DCC6AF6461D (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:qt:qt:5.12.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 3E4018AD-55DB-4C13-A26B-ED1564E4C501 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:qt:qt:5.12.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 6EC8E8B7-299B-4E76-9DC7-8482BA357B5E (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:qt:qt:5.13.0:*:*:*:*:*:*:* (string)

matchCriteriaId : FD5AC67C-2634-49DB-9F97-C27498047C1A (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:qt:qt:5.14.0:*:*:*:*:*:*:* (string)

matchCriteriaId : F8F2A2AC-F3DE-49E3-B0AF-3953ABD1C269 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string. (string)

}

1 : { »

lang : es (string)

value : Las tuberías nombradas en qtsingleapp en QT 5.x, tal y como se usan en qBittorrent y SugarSync, están configuradas para que se puedan acceder de manera remota y permitan que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) mediante una cadena no especificada. (string)

}

]

id : CVE-2017-15011 (string)

lastModified : 2024-11-21T03:13:55.940 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 5 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:N/I:N/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-10-04T01:29:03.433 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://www.youtube.com/watch?v=m6zISgWPGGY (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://www.youtube.com/watch?v=m6zISgWPGGY (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-119 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object