CVE-2015-0845: Code Injection
Published Apr 17, 2015
·Updated
Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates.
Affected Software
19 affected components
Sixapart Movabletype<=5.2.11
Sixapart Movabletype<=5.2.11
Sixapart Movabletype<=5.2.11
Sixapart Movabletype=6.0
Sixapart Movabletype=6.0
Sixapart Movabletype=6.0.1
Sixapart Movabletype=6.0.1
Sixapart Movabletype=6.0.2
Sixapart Movabletype=6.0.2
Sixapart Movabletype=6.0.3
Sixapart Movabletype=6.0.3
Sixapart Movabletype=6.0.4
Sixapart Movabletype=6.0.4
Sixapart Movabletype=6.0.5
Sixapart Movabletype=6.0.5
Sixapart Movabletype=6.0.6
Sixapart Movabletype=6.0.6
Sixapart Movabletype=6.0.7
Sixapart Movabletype=6.0.7
Event History
Apr 17, 2015
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-0845?
CVE-2015-0845 is categorized as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2015-0845?
To fix CVE-2015-0845, you should upgrade to Movable Type version 5.2.13 or above, or 6.0.8 or above.
3
What versions are affected by CVE-2015-0845?
CVE-2015-0845 affects Movable Type versions prior to 5.2.13 and 6.0.x versions before 6.0.8.
4
Can CVE-2015-0845 be exploited remotely?
Yes, CVE-2015-0845 can be exploited remotely, allowing attackers to execute arbitrary code.
5
Is CVE-2015-0845 related to template localization?
Yes, CVE-2015-0845 is related to vulnerabilities in the localization of templates in Movable Type.