Support Us — Your donation helps us keep running

Goal: 1000 CNY,Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-13995
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow in a global variable (sBuffer) leads to a Write-What-Where outcome. Writing beyond sBuffer will clobber most global variables until reaching a pointer such as DES_info or image_info. By controlling that pointer, one achieves an arbitrary write when its fields are assigned. The data written is from a potentially untrusted NITF file in the form of an integer. The attacker can gain control of the instruction pointer.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
U.S. Air Force Sensor Data Management System extract75 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
U.S. Air Force Sensor Data Management System是美国U.S. Air Force公司的一款游戏公司的数据管理系统。 U.S. Air Force Sensor Data Management System extract75存在缓冲区错误漏洞,该漏洞源于全局变量(sBuffer)的溢出会导致Write-What-Where写入结果。 超出sBuffer的写入将破坏大多数全局变量,直到到达诸如DES_info或image_info之类的指针为止。 通过控制该指针,可
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
-n/a n/a -
II. Public POCs for CVE-2020-13995
#POC DescriptionSource LinkShenlong Link
1Nonehttps://github.com/dbrumley/extract75-cve-2020-13995POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2020-13995
Please Login to view more intelligence information
New Vulnerabilities
V. Comments for CVE-2020-13995

No comments yet


Leave a comment