Lucene search

K
cve[email protected]CVE-2007-0097
HistoryJan 05, 2007 - 6:28 p.m.

CVE-2007-0097

2007-01-0518:28:00
web.nvd.nist.gov
17
cve-2007-0097
buffer overflow
paiso.dll
conexware powerarchiver 2006
security vulnerability
iso file
arbitrary code execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.1%

Multiple stack-based buffer overflows in the (1) LoadTree and (2) ReadHeader functions in PAISO.DLL 1.7.3.0 (1.7.3 beta) in ConeXware PowerArchiver 2006 9.64.02 allow user-assisted attackers to execute arbitrary code via a crafted ISO file containing a file within several nested directories.

Affected configurations

NVD
Node
conexwarepowerarchiver_2006Match9.64.02

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.1%