CVE-2011-5002

Published: Dec 25, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via a .fdx or .fdxt file with long (1) Word, (2) Transition, (3) Location, (4) Extension, (5) SceneIntro, (6) TimeOfDay, and (7) Character elements.

Affected (1)

Products: Finaldraft: Finaldraft

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Finaldraft Finaldraft	Up to 8.01

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (10)

http://osvdb.org/77454

Source: cve@mitre.org

http://secunia.com/advisories/47044

Source: cve@mitre.org

Vendor Advisory

http://www.exploit-db.com/exploits/18184

Source: cve@mitre.org

Exploit

http://www.security-assessment.com/files/documents/advisory/Final_Draft-Multiple_Stack_Buffer_Overflows.pdf

Source: cve@mitre.org

http://www.securityfocus.com/bid/50850

Source: cve@mitre.org

http://osvdb.org/77454

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/47044

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.exploit-db.com/exploits/18184

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.security-assessment.com/files/documents/advisory/Final_Draft-Multiple_Stack_Buffer_Overflows.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/50850

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.