CVE-2005-10003

MEDIUM EPSS 74.2%
Published Oct 17, 20241y ago · Modified Jun 16, 20261w ago
6.3 CVSS 4.0
Medium
Find Similar
Published Oct 17, 2024 1y ago
Last Modified Jun 16, 2026 1w ago

Description

A vulnerability classified as critical has been found in mikexstudios Xcomic up to 0.8.2. This affects an unknown part. The manipulation of the argument cmd leads to os command injection. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 0.8.3 is able to address this issue. The patch is named 6ed8e3cc336e29f09c7e791863d0559939da98bf. It is recommended to upgrade the affected component.

CVSS Details

Base Score
6.3
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity High
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
74.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-78 OS Command Injection Injection

Affected Products 1

VendorProductVersionRange
mikexstudiosxcomic* <0.8.3

References 6

  • xcomic.mikexstudios.com http://xcomic.mikexstudios.com/forum/viewtopic.php?id=130
    Broken Link
  • github.com https://github.com/mikexstudios/xcomic/commit/6ed8e3cc336e29f09c7e791863d0559939da98bf
    Product
  • github.com https://github.com/mikexstudios/xcomic/releases/tag/v0.8.3
    Release Notes
  • vuldb.com https://vuldb.com/?ctiid.280359
    Permissions RequiredThird Party AdvisoryVDB Entry
  • vuldb.com https://vuldb.com/?id.280359
    Third Party AdvisoryVDB Entry
  • web.archive.org https://web.archive.org/web/20071218144304/http://xcomic.mikexstudios.com/forum/viewtopic.php?id=130
    Product

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.