{"id":"CVE-2015-2094","aliases":["EUVD-2015-2204","GHSA-3r77-w9f5-q8q6"],"status":"published","title":"Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS...","description":"Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the (1) PrintSiteImage, (2) PlaySiteAllChannel, (3) StopSiteAllChannel, or (4) SaveSiteImage function.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.1401,"percentile":0.96578,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2015-03-09T14:00:00Z","modified":"2026-06-17T00:23:35Z","exploits":[{"source":"exploitdb","id":"EDB-36517","title":"WebGate WinRDS 2.0.8 - StopSiteAllChannel Stack Overflow","type":"remote","platform":"windows","date":"2015-03-27","url":"https://www.exploit-db.com/exploits/36517"},{"source":"exploitdb","id":"EDB-36604","title":"WebGate WinRDS 2.0.8 - PlaySiteAllChannel Stack Buffer Overflow","type":"remote","platform":"windows","date":"2015-04-02","url":"https://www.exploit-db.com/exploits/36604"}],"products":[{"vendor":"webgateinc","product":"winrds"}],"references":[{"url":"http://www.securityfocus.com/bid/72841","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-071/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.osvdb.org/118905","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://packetstormsecurity.com/files/131069/WebGate-WinRDS-2.0.8-StopSiteAllChannel-Stack-Overflow.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-074/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.osvdb.org/118906","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/118907","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-073/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/36517/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://www.osvdb.org/118908","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-072/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2094"},{"url":"https://www.exploit-db.com/exploits/36517"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-071"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-072"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-073"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-074"},{"url":"https://github.com/advisories/GHSA-3r77-w9f5-q8q6"}],"sources":{"cve":[{"id":"CVE-2015-2094","description":"Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the (1) PrintSiteImage, (2) PlaySiteAllChannel, (3) StopSiteAllChannel, or (4) SaveSiteImage function.","status":"published","published":"2015-03-09T14:00:00Z","modified":"2024-08-06T05:02:43.493Z","updated_at":"2026-11-02T14:35:41.621934Z"}],"euvd":[{"id":"EUVD-2015-2204","description":"Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the (1) PrintSiteImage, (2) PlaySiteAllChannel, (3) StopSiteAllChannel, or (4) SaveSiteImage function.","status":"published","published":"2015-03-09T14:00:00Z","modified":"2024-08-06T05:02:43Z","updated_at":"2026-11-03T02:22:13.253223Z"}],"ghsa":[{"id":"GHSA-3r77-w9f5-q8q6","title":"Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS...","description":"Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the (1) PrintSiteImage, (2) PlaySiteAllChannel, (3) StopSiteAllChannel, or (4) SaveSiteImage function.","status":"published","published":"2022-05-17T03:37:42Z","modified":"2025-04-12T12:46:58Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:21.34906Z"}],"nvd":[{"id":"CVE-2015-2094","description":"Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the (1) PrintSiteImage, (2) PlaySiteAllChannel, (3) StopSiteAllChannel, or (4) SaveSiteImage function.","status":"published","published":"2015-03-09T14:59:12.497Z","modified":"2026-06-17T00:23:35.353Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:03.313464Z"}]}}