Descrição
Atomic Alarm Clock 6.3 contains a stack overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string to the display name textbox in the Time Zones Clock configuration. Attackers can craft a buffer with structured exception handling overwrite and encoded shellcode to bypass SafeSEH protections and execute arbitrary commands with application privileges.
CVSS 8.4EPSS 0.152%Risco 0.85
Ver fonte- Publicação
- 2026-05-13 16:16:33
- Versões afetadas
- <6.4
- Tipo
- Package
- Vetor
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H