Lucene search

K
cveMitreCVE-2007-1037
HistoryFeb 21, 2007 - 5:28 p.m.

CVE-2007-1037

2007-02-2117:28:00
CWE-119
mitre
web.nvd.nist.gov
29
cve-2007-1037
stack-based buffer overflow
news file grabber
remote code execution
.nzb file
information security

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.242

Percentile

96.6%

Stack-based buffer overflow in News File Grabber 4.1.0.1 and earlier allows remote attackers to execute arbitrary code via a .nzb file with a long subject field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd
Node
rsbr-softwarenews_file_grabberRange4.1.0.1
VendorProductVersionCPE
rsbr-softwarenews_file_grabber*cpe:2.3:a:rsbr-software:news_file_grabber:*:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.242

Percentile

96.6%