CVE-2007-2835

🗓️ 03 Jul 2007 01:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 59 Views🌐 WEB

Multiple stack-based buffer overflows in CCE_pinyin.c and xl_pinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, allowing local users to gain privileges via a long HOME environment variable

Reporter	Title	Published	Views	Family All 16
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	7 Jul 201600:00	–	bdu_fstec
Cvelist	CVE-2007-2835	3 Jul 200701:00	–	cvelist
Debian	[SECURITY] [DSA 1328-1] New unicon-imc2 packages fix buffer overflow	1 Jul 200719:12	–	debian
Debian CVE	CVE-2007-2835	3 Jul 200701:00	–	debiancve
Tenable Nessus	Debian DSA-1328-1 : unicon-imc2 - buffer overflow	2 Jul 200700:00	–	nessus
EUVD	EUVD-2007-2827	7 Oct 202500:30	–	euvd
NVD	CVE-2007-2835	3 Jul 200701:30	–	nvd
OpenVAS	Debian: Security Advisory (DSA-1328-1)	17 Jan 200800:00	–	openvas
OpenVAS	Debian Security Advisory DSA 1328-1 (unicon-imc2)	17 Jan 200800:00	–	openvas
OSV	DEBIAN-CVE-2007-2835	3 Jul 200701:30	–	osv

NVD

Node

debian debian_linux

AND

unicon-imc2 unicon-imc2Match3.0.4

Source	Link
secunia	www.secunia.com/advisories/25912
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/35382
securityfocus	www.securityfocus.com/bid/24719
osvdb	www.osvdb.org/37794
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
debian	www.debian.org/security/2007/dsa-1328
secunia	www.secunia.com/advisories/25910

Parameter	Position	Path	Description	CWE
HOME	path	/<HOME>/.pyinput/usrphrase.tab	Buffer overflow using HOME to build user phrase file path (usrphrase.tab) in CCE_pinyin.c	CWE-119
HOME	path	/<HOME>/.pyinput/sysfrequency.tab	Buffer overflow using HOME to build system frequency file path (sysfrequency.tab) in xl_pinyin.c	CWE-119

16 Jun 2026 22:40Current

6.4Medium risk

Vulners AI Score6.4

CVSS 26.8

EPSS0.00343