CVE-2014-2994: Acunetix Web Vulnerability Scanner

High severity, CVSS 10.0. EPSS: 23.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL (src attribute).

Affected products

• Acunetix Web Vulnerability Scanner: version 8 only

Published 2014-04-27. Last modified 2026-06-17.