Back to Database
Status published
Critical
CVE-2014-2994
Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8...
Vulnerability Description
Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL (src attribute).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-2994
Credits & Attribution
No credits recorded in the NVD database.
References
- http://packetstormsecurity.com/files/126306/Acunetix-8-Stack-Buffer-Overflow.html
- http://www.acunetix.com/blog/news/misleading-reports-0-day-acunetix-wvs/
- https://www.youtube.com/watch?v=RHaMx8K1GeM
- http://www.exploit-db.com/exploits/32997
- http://an7isec.blogspot.co.il/2014/04/pown-noobs-acunetix-0day.html
- http://packetstormsecurity.com/files/126307/Acunetix-8-Scanner-Buffer-Overflow.html
- http://osandamalith.wordpress.com/2014/04/24/pwning-script-kiddies-acunetix-buffer-overflow/
More from acunetix
View All →CVE-2017-11674
Reporter.exe in Acunetix 8 allows remote attackers to cause a...
Medium
5.5
CVE-2017-11673
Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary...
Critical
9.8
CVE-2015-4027
The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before...
High
7.2
CVE-2007-0120
Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier...
Low
1.9
Affected Vendor
acunetix
View all reports →Affected Software
web vulnerability scanner
Vulnerable Versions:
8
Timeline
Official Publish:
April 27th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.