Lucene search

K
cve[email protected]CVE-2007-2855
HistoryMay 24, 2007 - 7:30 p.m.

CVE-2007-2855

2007-05-2419:30:00
CWE-119
web.nvd.nist.gov
21
cve-2007-2855
dartziplite.dll
buffer overflow
activex control
dart ziplite compression
remote code execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.247 Low

EPSS

Percentile

96.7%

Buffer overflow in a certain ActiveX control in DartZipLite.dll 1.8.5.3 in Dart ZipLite Compression for ActiveX allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2856.

Affected configurations

NVD
Node
dartdart_ziplite_compressionMatch1.8.5.3

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.247 Low

EPSS

Percentile

96.7%

Related for CVE-2007-2855