What is the severity of CVE-2014-0994?

CVE-2014-0994 has a critical severity due to its potential for remote code execution.

How do I fix CVE-2014-0994?

To fix CVE-2014-0994, update to the latest patch provided by Embarcadero for Delphi XE6 and C++ Builder XE6.

Who is affected by CVE-2014-0994?

CVE-2014-0994 affects users of Embarcadero Delphi XE6 and C++ Builder XE6 with the specific version 20.0.15596.9843.

When was CVE-2014-0994 disclosed?

CVE-2014-0994 was disclosed in September 2014.

Vulnerability/
CVE-2014-0994

medium

6.8

CWE

119

6/10/2014

6/8/2024

CVE-2014-0994: Buffer Overflow

First published: Mon Oct 06 2014(Updated: )

Heap-based buffer overflow in the ReadDIB function in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows context-dependent attackers to execute arbitrary code via the BITMAPINFOHEADER.biClrUsed field in a BMP file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0993.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Embarcadero C++Builder XE6	=20.0.15596.9843
Embarcadero Delphi XE6	=20.0.15596.9843

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2014-0994?
CVE-2014-0994 has a critical severity due to its potential for remote code execution.
How do I fix CVE-2014-0994?
To fix CVE-2014-0994, update to the latest patch provided by Embarcadero for Delphi XE6 and C++ Builder XE6.
Who is affected by CVE-2014-0994?
CVE-2014-0994 affects users of Embarcadero Delphi XE6 and C++ Builder XE6 with the specific version 20.0.15596.9843.
What type of attack does CVE-2014-0994 enable?
CVE-2014-0994 enables context-dependent attackers to execute arbitrary code on vulnerable systems.
When was CVE-2014-0994 disclosed?
CVE-2014-0994 was disclosed in September 2014.

agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/author
agent/severity
agent/references
agent/last-modified-date
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
agent/weakness
vendor/embarcadero
canonical/embarcadero c++builder xe6
version/embarcadero c++builder xe6/20.0.15596.9843
canonical/embarcadero delphi xe6
version/embarcadero delphi xe6/20.0.15596.9843

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2014-0994?
CVE-2014-0994 has a critical severity due to its potential for remote code execution.
How do I fix CVE-2014-0994?
To fix CVE-2014-0994, update to the latest patch provided by Embarcadero for Delphi XE6 and C++ Builder XE6.
Who is affected by CVE-2014-0994?
CVE-2014-0994 affects users of Embarcadero Delphi XE6 and C++ Builder XE6 with the specific version 20.0.15596.9843.
What type of attack does CVE-2014-0994 enable?
CVE-2014-0994 enables context-dependent attackers to execute arbitrary code on vulnerable systems.
When was CVE-2014-0994 disclosed?
CVE-2014-0994 was disclosed in September 2014.

CVE-2014-0994: Buffer Overflow

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2014-0994?

How do I fix CVE-2014-0994?

Who is affected by CVE-2014-0994?

What type of attack does CVE-2014-0994 enable?

When was CVE-2014-0994 disclosed?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2014-0994?

How do I fix CVE-2014-0994?

Who is affected by CVE-2014-0994?

What type of attack does CVE-2014-0994 enable?

When was CVE-2014-0994 disclosed?