Lucene search

K
cve[email protected]CVE-2007-2888
HistoryMay 30, 2007 - 1:30 a.m.

CVE-2007-2888

2007-05-3001:30:00
NVD-CWE-Other
web.nvd.nist.gov
20
cve-2007-2888
ultraiso
buffer overflow
remote code execution
nvd

8.2 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.948 High

EPSS

Percentile

99.3%

Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrary code via a long FILE string (filename) in a .cue file, a related issue to CVE-2007-2761. NOTE: some details are obtained from third party information.

8.2 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.948 High

EPSS

Percentile

99.3%