Buffer overflow in Hexagon Erdas Apollo Ecwp

CVE-2013-0728

Multiple stack-based buffer overflows in NCSAddOn.dll in the ERDAS APOLLO ECWP plugin before 13.00.0001 for Internet Explorer, Firefox, and Chrome allow remote attackers to execute arbitrary code via a long property value.

Vulnerability class: Buffer Overflow

EPSS: 0.044 (90.3th percentile) — read the EPSS interpretation.

Affected products

Hexagon Erdas_apollo_ecwp — versions 13.00.0000
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)