Winimage Security Vulnerabilities and Issues — Winimage CVE List

Lucene search

WinimageWinimage

3 matches found

CVE•added 2007/09/18 10:17 p.m.•50 views

CVE-2007-4963

Visual truncation vulnerability in WinImage 8.10 and earlier allows remote attackers to spoof a destination filename via a long sequence of space characters in a filename within a (1) .IMG or (2) .ISO file. NOTE: this can be leveraged with a separate directory traversal vulnerability to trick a car...

9.3CVSS6.7AI score0.00434EPSS

CVE•added 2007/09/18 10:17 p.m.•36 views

CVE-2007-4964

WinImage 8.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via an invalid BPB_BytsPerSec field in the header of a .IMG file.

5CVSS6.6AI score0.03853EPSS

CVE•added 2007/09/18 10:17 p.m.•27 views

CVE-2007-4962

Directory traversal vulnerability in WinImage 8.10 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a filename within a (1) .IMG or (2) .ISO file. NOTE: this can be leveraged for code execution by writing to a Startup folder.

9.3CVSS7.3AI score0.04224EPSS