Lucene search

[email protected]CVE-2007-4336

HistoryAug 14, 2007 - 6:17 p.m.

CVE-2007-4336

2007-08-1418:17:00

[email protected]

web.nvd.nist.gov

cve-2007-4336

buffer overflow

dxsurface

livepicture

flashpix

activex

dxtlipi.dll

microsoft

directx media 6.0 sdk

remote code execution

sourceurl property

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.8 High

AI Score

Confidence

High

0.949 High

EPSS

Percentile

99.3%

JSON

Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, allows remote attackers to execute arbitrary code via a long SourceUrl property value.

Affected configurations

NVD

Node

microsoftdirectx_mediaMatch6.0

CPENameOperatorVersion
microsoft:directx_mediamicrosoft directx mediaeq6.0

CPE	Name	Operator	Version
microsoft:directx_media	microsoft directx media	eq	6.0

References

osvdb.org/36399

secunia.com/advisories/26426

www.kb.cert.org/vuls/id/466601

www.securityfocus.com/bid/25279

www.securitytracker.com/id?1018551

www.vupen.com/english/advisories/2007/2857

exchange.xforce.ibmcloud.com/vulnerabilities/35970

www.exploit-db.com/exploits/4279

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.8 High

AI Score

Confidence

High

0.949 High

EPSS

Percentile

99.3%

JSON

Related for CVE-2007-4336

cvelist1 prion1 nvd1