Lucene search

MitreCVE-2007-2984

HistoryJun 01, 2007 - 10:30 a.m.

CVE-2007-2984

2007-06-0110:30:00

CWE-119

mitre

web.nvd.nist.gov

cve-2007-2984

media technology group

cdpass activex control

buffer overflow

remote code execution

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.103

Percentile

95.0%

JSON

Multiple stack-based buffer overflows in the Media Technology Group CDPass ActiveX control in CDPass.dll allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the GetTOC2 method.

Affected configurations

Nvd

Node

media_technology_groupcdpass_activex_controlMatch1.0.0.13

VendorProductVersionCPE
media_technology_groupcdpass_activex_control1.0.0.13cpe:2.3:a:media_technology_group:cdpass_activex_control:1.0.0.13:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
media_technology_group	cdpass_activex_control	1.0.0.13	cpe:2.3:a:media_technology_group:cdpass_activex_control:1.0.0.13:::::::*

References

osvdb.org/36717

secunia.com/advisories/25471

www.kb.cert.org/vuls/id/933353

www.securityfocus.com/bid/24220

www.vupen.com/english/advisories/2007/1978

exchange.xforce.ibmcloud.com/vulnerabilities/34578

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.103

Percentile

95.0%

JSON

Related for CVE-2007-2984