Fedora 7 : vavoom-1.24-3.fc7 (2007-1977)

Security update fixing various format strings vulnerabilities and a DOS vulnerability in the vavoom server, this fixes: CVE-2007-4533, CVE-2007-4534 & CVE-2007-4535. Also see bugzilla bug 256621. Note that Tenable Network Security has extracted the preceding description block directly from the...

CVE-2007-4535

CVE-2007-4535 affects Vavoom 1.24 and earlier. The vulnerability resides in the VStr::Resize function (str.cpp) under UDP handling, where a string with a negative NewLen value can trigger an assertion error, allowing remote attackers to cause a daemon crash (denial of service). Fedora advisories ...