CVE-2019-19513

CRITICAL

9.8

Description

The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows is prone to an out of bounds write vulnerability. An attacker may exploit this to execute code on the target machine. A failure in exploitation leads to a denial of service.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published10/16/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

microsoft:windowsun4seen:bassmidi

Weaknesses (CWE)

CWE-787

References

http://www.un4seen.com/(cve@mitre.org)

https://github.com/staufnic/CVE/tree/master/CVE-2019-19513(cve@mitre.org)

http://www.un4seen.com/(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/staufnic/CVE/tree/master/CVE-2019-19513(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.