Lucene search

MitreCVE-2007-2856

HistoryMay 24, 2007 - 7:30 p.m.

CVE-2007-2856

2007-05-2419:30:00

CWE-119

mitre

web.nvd.nist.gov

cve-2007-2856

buffer overflow

dart communications

powertcp

zip compression

activex control

dartzip.dll

internet explorer 6

remote code execution

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.247

Percentile

96.7%

JSON

Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2855.

Affected configurations

Nvd

Node

dartpowertcp_zip_compressionMatch1.8.5.3

AND

microsoftinternet_explorerMatch6

VendorProductVersionCPE
dartpowertcp_zip_compression1.8.5.3cpe:2.3:a:dart:powertcp_zip_compression:1.8.5.3:*:*:*:*:*:*:*
microsoftinternet_explorer6cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dart	powertcp_zip_compression	1.8.5.3	cpe:2.3:a:dart:powertcp_zip_compression:1.8.5.3:::::::*
microsoft	internet_explorer	6	cpe:2.3:a:microsoft:internet_explorer:6:::::::*

References

osvdb.org/38111

retrogod.altervista.org/ie_DartZip_bof.html

www.securityfocus.com/archive/1/469503/100/0/threaded

www.securityfocus.com/archive/1/469592/100/0/threaded

www.securityfocus.com/bid/24142

www.securityfocus.com/bid/24163

exchange.xforce.ibmcloud.com/vulnerabilities/34494

exchange.xforce.ibmcloud.com/vulnerabilities/34520

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.247

Percentile

96.7%

JSON

Related for CVE-2007-2856