CVE-2015-5672

TYPE-MOON Visual Novels - Crafted Save OS Command Execution

Title source: manual
STIX 2.1

Description

TYPE-MOON Fate/stay night, Fate/hollow ataraxia, Witch on the Holy Night, and Fate/stay night + hollow ataraxia set allow remote attackers to execute arbitrary OS commands via crafted saved data.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_confirm
http://www.typemoon.com/support/vulnerability150902.html
Vendor Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN80144272/index.html
Vendor Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000174

Scores

EPSS 0.0372
EPSS Percentile 88.4%

Details

CWE
CWE-78
Status published
Products (4)
typemoon/fate\/hollow_ataraxia
typemoon/fate\/stay_night
typemoon/fate\/stay_night_\+_hollow_ataraxia_set
typemoon/witch_on_the_holy_night
Published Nov 06, 2015
Tracked Since Feb 18, 2026