CNNVD-202508-2539 Information

CNNVD ID

CNNVD-202508-2539

CVE-2010-20120

  • CNNVD Published: 2025-08-21

Description (Chinese)

Maplesoft Maple是加拿大Maplesoft公司的一款数学和工程计算软件。 Maplesoft Maple 13及之前版本存在安全漏洞,该漏洞源于.maplet文件可自动执行嵌入命令,可能导致执行任意代码。

Description (English)

Maplesoft Maple is a mathematical and engineering computing software from Maplesoft Canada. There is a security loophole in Maplesoft Maple 13 and earlier versions, which stems from the automatic execution of embedded commands in the .maplet file, which may result in the enforcement of any code.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Maplesoft

Published

2025-08-21

Last Modified

2026-02-24

References

https://www.vulncheck.com/advisories/maple-maplet-file-creation-command-execution https://www.maplesoft.com/products/maple/ https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:MISC:MAPLE-MAPLET-CMD-EXEC.html https://www.exploit-db.com/exploits/16308 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/fileformat/maple_maplet.rb https://nvd.nist.gov/vuln/detail/CVE-2010-20120

Share on: