CVE-2013-0728

Multiple stack-based buffer overflows in NCSAddOn.dll in the ERDAS APOLLO ECWP plugin before 13.00.0001 for Internet Explorer, Firefox, and Chrome allow remote attackers to execute arbitrary code via a long property value.

Score

CVSS 2.0 10.0 Critical

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2013-04-25

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Erdas Apollo Ecwp (Hexagon)

References

• http://secunia.com/advisories/51647