Lucene search

[email protected]CVE-2007-0391

HistoryJan 19, 2007 - 11:28 p.m.

CVE-2007-0391

2007-01-1923:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-0391

format string vulnerability

bitdefender

client

professional plus

arbitrary code execution

nvd

7.6 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

36.0%

JSON

Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attackers to execute arbitrary code via certain scan job settings.

CPENameOperatorVersion
bitdefender:bitdefender_clientbitdefender bitdefender clienteqprofessional_plus_8.02

CPE	Name	Operator	Version
bitdefender:bitdefender_client	bitdefender bitdefender client	eq	professional_plus_8.02

References

lists.grok.org.uk/pipermail/full-disclosure/2007-January/051883.html

www.bitdefender.com/KB325-en--Format-string-vulnerability.html

www.securityfocus.com/archive/1/457414/100/0/threaded

www.securityfocus.com/bid/22128

www.vupen.com/english/advisories/2007/0253

exchange.xforce.ibmcloud.com/vulnerabilities/31608

7.6 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

36.0%

JSON

Related for CVE-2007-0391

securityvulns1 nessus1 prion1