Fedora 7 : vavoom-1.24-3.fc7 (2007-1977)

Security update fixing various format strings vulnerabilities and a DOS vulnerability in the vavoom server, this fixes: CVE-2007-4533, CVE-2007-4534 & CVE-2007-4535. Also see bugzilla bug 256621. Note that Tenable Network Security has extracted the preceding description block directly from the...

CVE-2007-4534

CVE-2007-4534 affects Vavoom 1.24 and earlier, where a buffer overflow in VThinker::BroadcastPrintf (p_thinker.cpp) allows remote code execution via overly long strings in chat messages or a long name field. The vulnerability is documented in the NVD entry for CVE-2007-4534 (base score 7.5, HIGH,...