6.8
CVSSv2

CVE-2013-2238

Published: 30/09/2013 Updated: 11/10/2013
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.

Vulnerable Product Search on Vulmon Subscribe to Product

freeswitch freeswitch 1.2