Lucene search

K
cveMitreCVE-2007-5155
HistoryOct 01, 2007 - 5:17 a.m.

CVE-2007-5155

2007-10-0105:17:00
CWE-119
CWE-20
mitre
web.nvd.nist.gov
25
iceows
icegui.dll
cve-2007-5155
remote code execution
stack-based buffer overflow

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.055

Percentile

93.2%

IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which triggers a stack-based buffer overflow.

Affected configurations

Nvd
Node
iceowsiceowsMatch4.20b
VendorProductVersionCPE
iceowsiceows4.20bcpe:2.3:a:iceows:iceows:4.20b:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.055

Percentile

93.2%

Related for CVE-2007-5155