Lucene search

[email protected]CVE-2007-2919

HistoryJun 06, 2007 - 10:30 p.m.

CVE-2007-2919

2007-06-0622:30:00

[email protected]

web.nvd.nist.gov

cve-2007-2919

buffer overflow

flipviewerx.dll

denial of service

code execution

activex control

security vulnerability.

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.869 High

EPSS

Percentile

98.6%

JSON

Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via long (1) UID, (2) Opf, (3) PAGENO, (4) LaunchMode, (5) SubID, (6) BookID, (7) LibraryID, (8) SubURL, and (9) LoadOpf properties.

Affected configurations

NVD

Node

e-book_systemsflipviewerRange≤4.0

CPENameOperatorVersion
e-book_systems:flipviewere-book systems flipviewerle4.0

CPE	Name	Operator	Version
e-book_systems:flipviewer	e-book systems flipviewer	le	4.0

References

osvdb.org/37042

secunia.com/advisories/25568

www.kb.cert.org/vuls/id/449089

www.securityfocus.com/bid/24328

www.vupen.com/english/advisories/2007/2081

exchange.xforce.ibmcloud.com/vulnerabilities/34742

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.869 High

EPSS

Percentile

98.6%

JSON

Related for CVE-2007-2919

nessus1 nvd1 prion1 packetstorm1 cert1 cvelist1