Lucene search

MitreCVE-2007-1891

HistoryApr 18, 2007 - 3:19 a.m.

CVE-2007-1891

2007-04-1803:19:00

mitre

web.nvd.nist.gov

cve-2007-1891

buffer overflow

akamai technologies

download manager

activex control

security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.349

Percentile

97.1%

JSON

Stack-based buffer overflow in the GetPrivateProfileSectionW function in Akamai Technologies Download Manager ActiveX Control (DownloadManagerV2.ocx) after 2.0.4.4 but before 2.2.1.0 allows remote attackers to execute arbitrary code, related to misinterpretation of the nSize parameter as a byte count instead of a wide character count.

Affected configurations

Nvd

Node

akamai_technologiesdownload_managerMatch2.2.0.0

VendorProductVersionCPE
akamai_technologiesdownload_manager2.2.0.0cpe:2.3:a:akamai_technologies:download_manager:2.2.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
akamai_technologies	download_manager	2.2.0.0	cpe:2.3:a:akamai_technologies:download_manager:2.2.0.0:::::::*

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=514

secunia.com/advisories/24900

www.kb.cert.org/vuls/id/120241

www.osvdb.org/34323

www.securityfocus.com/archive/1/465908/100/0/threaded

www.securityfocus.com/bid/23522

www.securitytracker.com/id?1017925

www.vupen.com/english/advisories/2007/1415

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.349

Percentile

97.1%

JSON

Related for CVE-2007-1891