CVE-2007-1544

2007-03-2022:19:00

mitre

web.nvd.nist.gov

cve-2007-1544

integer overflow

procauwriteelement

nas

denial of service

remote attackers

arbitrary code

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.6

Confidence

Low

EPSS

0.118

Percentile

95.3%

JSON

Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large max_samples value.

Affected configurations

Nvd

Node

mandrakesoftmandrake_linuxMatch2007

mandrakesoftmandrake_linuxMatch2007x86_64

AND

radscannetwork_audio_systemMatch1.8a

VendorProductVersionCPE
mandrakesoftmandrake_linux2007cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:*
mandrakesoftmandrake_linux2007cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:x86_64:*:*:*:*:*
radscannetwork_audio_system1.8acpe:2.3:a:radscan:network_audio_system:1.8a:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mandrakesoft	mandrake_linux	2007	cpe:2.3:o:mandrakesoft:mandrake_linux:2007:::::::*
mandrakesoft	mandrake_linux	2007	cpe:2.3:o:mandrakesoft:mandrake_linux:2007::x86_64:::::
radscan	network_audio_system	1.8a	cpe:2.3:a:radscan:network_audio_system:1.8a:::::::*