Lucene search

MitreCVE-2007-2323

HistoryApr 27, 2007 - 12:19 a.m.

CVE-2007-2323

2007-04-2700:19:00

mitre

web.nvd.nist.gov

cve-2007-2323

buffer overflow

windvdx

activex control

intervideo home theater

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.048

Percentile

92.8%

JSON

Multiple buffer overflows in the WinDVDX ActiveX control in InterVideo Home Theater 2.1.13.0 and 2.5.13.58 allow remote attackers to execute arbitrary code via a long string argument to the (1) GetDiscType or (2) AddFileList method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

intervideohome_theaterMatch2.1.13.0

intervideohome_theaterMatch2.5.13.58

VendorProductVersionCPE
intervideohome_theater2.1.13.0cpe:2.3:a:intervideo:home_theater:2.1.13.0:*:*:*:*:*:*:*
intervideohome_theater2.5.13.58cpe:2.3:a:intervideo:home_theater:2.5.13.58:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intervideo	home_theater	2.1.13.0	cpe:2.3:a:intervideo:home_theater:2.1.13.0:::::::*
intervideo	home_theater	2.5.13.58	cpe:2.3:a:intervideo:home_theater:2.5.13.58:::::::*

References

osvdb.org/34330

secunia.com/advisories/24710

www.securityfocus.com/bid/23637

exchange.xforce.ibmcloud.com/vulnerabilities/33868

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.048

Percentile

92.8%

JSON

Related for CVE-2007-2323