VDB

CVE-2017-8368

CVE-2017-8368 PUBLISHED CVSS 7.800000190734863 HIGH

Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands, as demonstrated by Ctrl-A, Delete, and Ctrl-Z.

EPSS 0.91% · 59.9th percentile

Risk Scores

CVSS 3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.91%
59.9th percentile

Affected Products

VendorProductVersions
n/an/an/a
sublimetextsublime_text_3

Timeline

  • Jul 5, 2017 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 26, 2021 EPSS Score
  • Oct 28, 2021 EPSS Score
  • Dec 31, 2021 EPSS Score
  • Mar 4, 2022 EPSS Score
  • May 7, 2022 EPSS Score
  • Jul 9, 2022 EPSS Score
  • Nov 14, 2022 EPSS Score
  • Jan 17, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 50/day Open console ›