Lucene search

K
cve[email protected]CVE-2007-5048
HistorySep 24, 2007 - 12:17 a.m.

CVE-2007-5048

2007-09-2400:17:00
CWE-119
web.nvd.nist.gov
24
cve-2007-5048
heap-based buffer overflow
lhaplus
remote code execution
arj archive
nvd

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.184 Low

EPSS

Percentile

96.2%

Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive.

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.184 Low

EPSS

Percentile

96.2%

Related for CVE-2007-5048