Lucene search

K
cve[email protected]CVE-2007-5252
HistoryOct 06, 2007 - 5:17 p.m.

CVE-2007-5252

2007-10-0617:17:00
CWE-119
web.nvd.nist.gov
24
cve-2007-5252
buffer overflow
netsupport manager
netsupport school student
remote servers
denial of service
arbitrary code
configuration exchange
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%

Buffer overflow in NetSupport Manager (NSM) Client 10.00 and 10.20, and NetSupport School Student (NSS) 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor statement, which is too vague to be sure that it is for this particular issue, says that only a denial of service is possible.

Affected configurations

NVD
Node
netsupportnetsupport_manager_clientMatch10.00
OR
netsupportnetsupport_manager_clientMatch10.20
OR
netsupportnetsupport_school_studentMatch9.00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%

Related for CVE-2007-5252