Lucene search

K
saintSAINT CorporationSAINT:C01C842322CA2A029AB58E00489A77CD
HistoryNov 10, 2008 - 12:00 a.m.

Adobe PageMaker key strings buffer overflow

2008-11-1000:00:00
SAINT Corporation
download.saintcorporation.com
7

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.244 Low

EPSS

Percentile

96.6%

Added: 11/10/2008
CVE: CVE-2007-6432
BID: 31999
OSVDB: 50055

Background

Adobe PageMaker is page layout software.

Problem

A buffer overflow vulnerability in **AldFs32.dll** allows command execution when a user opens a specially crafted PMD file.

Resolution

See the solution referenced in APSA08-10.

References

<http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=749&gt;

Limitations

Exploit works on Adobe PageMaker 7.0.1 and requires a user to open the exploit file in Adobe PageMaker.

Platforms

Windows

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.244 Low

EPSS

Percentile

96.6%

Related for SAINT:C01C842322CA2A029AB58E00489A77CD