CVE-2010-2440

Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to execute arbitrary code via a crafted SRT file with a long line after a time range. NOTE: some of these details are obtained from third party information.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

5.59% chance of exploitation in the next 30 days, 92th percentile

Published

2010-06-24

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/13965

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/13965

References

• CVE Record
• NVD entry

Related

• CVE-2010-2439
• CVE-2010-2441
• CVE-2010-2438
• CVE-2010-2456
• CVE-2010-2437
• CVE-2010-2457