CosmicSting attack threatens 75% of Adobe Commerce stores
60
CVE-2024-2961
—1CVSS 3.1
7.3 high
EPSS
88%p100
Published
()
Modified
Description
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.
- Vendors
- gnunetappdebian
- Products
- glibc, active iq unified manager, debian linux, hci h300s firmware, hci h500s firmware, hci h700s firmware, hci h410s firmware, hci h410c firmware, hci h610c firmware, hci h610s firmware, hci h615c firmware, hci compute node
- Weakness
- CWE-787
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
In the news6 stories
Persistent backdoors injected on Adobe Commerce via new CosmicSting attack
60
CosmicSting attack & defense overview
60
60
60
60