CVE-2007-5217

2007-10-0500:17:00

CWE-119

[email protected]

web.nvd.nist.gov

cve

buffer overflow

adm4

activex control

altnet download manager

remote code execution

security vulnerability

8 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.682 Medium

EPSS

Percentile

97.9%

JSON

Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) Kazaa 3.2.7 and (2) Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
altnet:altnet_download_manageraltnet altnet download managereq4.0.0.6
kazaa:kazaa_media_desktopkazaa kazaa media desktopeq3.2.7
grokster:grokstergrokstereq2.6

CPE	Name	Operator	Version
altnet:altnet_download_manager	altnet altnet download manager	eq	4.0.0.6
kazaa:kazaa_media_desktop	kazaa kazaa media desktop	eq	3.2.7
grokster:grokster	grokster	eq	2.6