Lucene search

K
cve[email protected]CVE-2007-2758
HistoryMay 18, 2007 - 10:30 p.m.

CVE-2007-2758

2007-05-1822:30:00
NVD-CWE-Other
web.nvd.nist.gov
22
cve-2007-2758
winimage
buffer overflow
remote code execution
fat image

8.8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.106 Low

EPSS

Percentile

95.0%

Multiple buffer overflows in WinImage 8.0.8000 allow user-assisted remote attackers to execute arbitrary code via a FAT image that contains long directory names in a deeply nested directory structure, which triggers (1) a stack-based buffer overflow during extraction, or (2) a heap-based buffer overflow during traversal.

CPENameOperatorVersion
winimage:winimagewinimageeq8.0.8000

8.8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.106 Low

EPSS

Percentile

95.0%

Related for CVE-2007-2758