hardlink Project hardlink

CPE Details

hardlink Project hardlink
hardlink_project
hardlink
-
2019-12-05
15h59 +00:00
2019-12-05
15h59 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:hardlink_project:hardlink:-:*:*:*:*:*:*:*

Informations

Vendor

hardlink_project

Product

hardlink

Version

-

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2011-3632 2019-11-26 02h34 +00:00 Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks.
7.1
High
CVE-2011-3631 2019-11-26 02h22 +00:00 Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used. A remote attacker could provide a specially-crafted directory tree and trick the local user into consolidating it, leading to hardlink executable crash or potentially arbitrary code execution with user privileges.
8.8
High
CVE-2011-3630 2019-11-26 02h08 +00:00 Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink executable crash, or, potentially arbitrary code execution with the privileges of the user running the hardlink executable.
8.8
High