CVE-2012-2915
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 29%
from disclosure to weapon17 days
Published on NVDMay 21
1st PoC+17d
metasploitMay 16
exploitation probability
29%top 2% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design (.pac) file.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/19006unverifiedexploitdbwww.exploit-db.com/exploits/19175unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.