Critical Vulnerability Information Vulnerability Name: Electronics Workbench (EWB File) Local Stack Overflow PoC Discovery Date: 2008.12.10 Risk Level: High Local Impact: Yes Remote Impact: No CVE ID: CVE-2008-5383 CWE ID: CWE-119 CVSS Score: - Base Score: 9.3/10 - Impact Subscore: 10/10 - Exploitability Subscore: 8.6/10 - Attack Complexity: Medium - Authentication: None required - Confidentiality Impact: Complete - Integrity Impact: Complete - Availability Impact: Complete Application: Electronics Workbench Vulnerability Description: Stack buffer overflow in .EWB file handling (Proof of Concept PoC) Authors: UnderzOne Crew, Zigma References: - http://xforce.iss.net/xforce/xfdb/46996 Summary: This vulnerability involves a stack buffer overflow in the Electronics Workbench application when processing .EWB files. Exploiting this flaw could lead to arbitrary code execution or application crash.