CVE-2007-6016

2008-02-2919:44:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2007-6016

information security

buffer overflow

activex

symantec

backup exec

remote code execution

vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.958 High

EPSS

Percentile

99.5%

JSON

Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary code via a long (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, or (19) _MonthText11 property value when executing the Save method. NOTE: the vendor states “Authenticated user involvement required,” but authentication is not needed to attack a client machine that loads this control.

Affected configurations

NVD

Node

symantecbackup_exec_for_windows_serverMatch11d11.0.6235

symantecbackup_exec_for_windows_serverMatch11d11.0.7170

symantecbackup_exec_for_windows_serverMatch12.012.0.1364

CPENameOperatorVersion
symantec:backup_exec_for_windows_serversymantec backup exec for windows servereq11d
symantec:backup_exec_for_windows_serversymantec backup exec for windows servereq12.0

CPE	Name	Operator	Version
symantec:backup_exec_for_windows_server	symantec backup exec for windows server	eq	11d
symantec:backup_exec_for_windows_server	symantec backup exec for windows server	eq	12.0