CVE-2010-10001

MEDIUM

Shemes GrabIt < 1.7.2 - Denial of Service via NZB Date Parser

Title source: llm
STIX 2.1

Description

A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the component NZB Date Parser. The manipulation of the argument date with the input 1000000000000000 as part of a NZB File leads to a denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

References (3)

Core 3
Core References
Permissions Required, Third Party Advisory x_refsource_misc
https://vuldb.com/?id.4143
Exploit, Mailing List, Third Party Advisory x_refsource_misc
http://seclists.org/bugtraq/2010/Jul/60

Scores

CVSS v3 5.3
EPSS 0.0085
EPSS Percentile 53.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-404
Status published
Products (2)
shemes/grabit 1.7.2 beta (4 CPE variants)
shemes/grabit < 1.7.2
Published Mar 28, 2022
Tracked Since Feb 18, 2026