CVE-2015-4067

Integer overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote attackers to execute arbitrary code via crafted template string specifiers in a serialized object, which triggers a heap-based buffer overflow.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2015-05-29

Last modified

2024-08-06

Weaknesses

CWE-189

Affected products

• Netvault Backup (Dell)

References

• http://www.securityfocus.com/bid/74841
• http://www.zerodayinitiative.com/advisories/ZDI-15-240/