CVE-2007-3314

2007-06-2118:30:00

mitre

web.nvd.nist.gov

cve-2007-3314

altap servant salamander

portable executable viewer

buffer overflow

remote code execution

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.948

Percentile

99.3%

JSON

Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portable Executable Viewer 1.00 (English Trial), allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file.

Affected configurations

Nvd

Node

altapportable_executable_viewerMatch2.02english_trial

altapservant_salamanderMatch2.5

Node

altapportable_executable_viewerMatch1.00english_trial

altapservant_salamanderMatch2.0

VendorProductVersionCPE
altapportable_executable_viewer2.02cpe:2.3:a:altap:portable_executable_viewer:2.02:*:english_trial:*:*:*:*:*
altapservant_salamander2.5cpe:2.3:a:altap:servant_salamander:2.5:*:*:*:*:*:*:*
altapportable_executable_viewer1.00cpe:2.3:a:altap:portable_executable_viewer:1.00:*:english_trial:*:*:*:*:*
altapservant_salamander2.0cpe:2.3:a:altap:servant_salamander:2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
altap	portable_executable_viewer	2.02	cpe:2.3:a:altap:portable_executable_viewer:2.02::english_trial:::::
altap	servant_salamander	2.5	cpe:2.3:a:altap:servant_salamander:2.5:::::::*
altap	portable_executable_viewer	1.00	cpe:2.3:a:altap:portable_executable_viewer:1.00::english_trial:::::
altap	servant_salamander	2.0	cpe:2.3:a:altap:servant_salamander:2.0:::::::*