Lucene search

K
cve[email protected]CVE-2007-2646
HistoryMay 14, 2007 - 9:19 p.m.

CVE-2007-2646

2007-05-1421:19:00
web.nvd.nist.gov
20
cve-2007-2646
yenc32
buffer overflow
remote code execution
ntx file
security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.155 Low

EPSS

Percentile

95.9%

Heap-based buffer overflow in yEnc32 1.0.7.207 allows user-assisted remote attackers to execute arbitrary code via a long filename in an NTX file.

Affected configurations

NVD
Node
yenc32yenc32Match1.0.7.207
CPENameOperatorVersion
yenc32:yenc32yenc32eq1.0.7.207

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.155 Low

EPSS

Percentile

95.9%

Related for CVE-2007-2646