Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2007-2500HistoryMay 04, 2007 - 12:19 a.m.
CVE-2007-2500
2007-05-0400:19:00
Debian Security Bug Tracker
security-tracker.debian.org
5
0.096 Low
EPSS
Percentile
94.8%
server/parser/sprite_definition.cpp in GNU Gnash (aka GNU Flash Player) 0.7.2 allows remote attackers to execute arbitrary code via a large number of SHOWFRAME elements within a DEFINESPRITE element, which triggers memory corruption and enables the attacker to call free with an arbitrary address, probably resultant from a buffer overflow.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | gnash | < 0.8.11~git20160608-1.3 | gnash_0.8.11~git20160608-1.3_all.deb |
Related
securityvulns
securityvulns
GNU Gnash Flash Player array overflow
2007-05-09 00:00:00
cvelist
cvelist
CVE-2007-2500
2007-05-04 00:00:00
prion
prion
Buffer overflow
2007-05-04 00:19:00
nessus
nessus
openSUSE 10 Security Update : gnash (gnash-3447)
2007-10-17 00:00:00
ubuntucve
ubuntucve
CVE-2007-2500
2007-05-04 00:00:00
nvd
nvd
CVE-2007-2500
2007-05-04 00:19:00
cve
cve
CVE-2007-2500
2007-05-04 00:19:00