Lucene search

K
saintSAINT CorporationSAINT:CB023723732BA1F947853D1234159639
HistoryNov 10, 2008 - 12:00 a.m.

Adobe PageMaker key strings buffer overflow

2008-11-1000:00:00
SAINT Corporation
download.saintcorporation.com
13

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.244 Low

EPSS

Percentile

96.1%

Added: 11/10/2008
CVE: CVE-2007-6432
BID: 31999
OSVDB: 50055

Background

Adobe PageMaker is page layout software.

Problem

A buffer overflow vulnerability in **AldFs32.dll** allows command execution when a user opens a specially crafted PMD file.

Resolution

See the solution referenced in APSA08-10.

References

<http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=749&gt;

Limitations

Exploit works on Adobe PageMaker 7.0.1 and requires a user to open the exploit file in Adobe PageMaker.

Platforms

Windows

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.244 Low

EPSS

Percentile

96.1%

Related for SAINT:CB023723732BA1F947853D1234159639