Lucene search

MitreCVE-2007-6175

HistoryNov 30, 2007 - 12:46 a.m.

CVE-2007-6175

2007-11-3000:46:00

CWE-119

mitre

web.nvd.nist.gov

lhaplus

buffer overflow

remote code execution

lzh archive

cve-2007-6175

CVSS2

6.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:P/I:P/A:C

AI Score

7.7

Confidence

Low

EPSS

0.192

Percentile

96.4%

JSON

Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.

Affected configurations

Nvd

Node

lhapluslhaplusMatch1.55

VendorProductVersionCPE
lhapluslhaplus1.55cpe:2.3:a:lhaplus:lhaplus:1.55:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lhaplus	lhaplus	1.55	cpe:2.3:a:lhaplus:lhaplus:1.55:::::::*

References

jvn.jp/jp/JVN%2382610488/index.html

osvdb.org/40583

secunia.com/advisories/27734

www.securityfocus.com/bid/26531

www.vupen.com/english/advisories/2007/3960

www7a.biglobe.ne.jp/~schezo/lzh_vul.html

exchange.xforce.ibmcloud.com/vulnerabilities/38624

CVSS2

6.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:P/I:P/A:C

AI Score

7.7

Confidence

Low

EPSS

0.192

Percentile

96.4%

JSON

Related for CVE-2007-6175