Lucene search

MitreCVE-2007-3815

HistoryJul 17, 2007 - 12:30 a.m.

CVE-2007-3815

2007-07-1700:30:00

mitre

web.nvd.nist.gov

cve-2007-3815

buffer overflow

pirs32.exe

poslovni informator republike slovenije

pirs 2007

denial of service

arbitrary code

windows environment

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

7.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Buffer overflow in pirs32.exe in Poslovni informator Republike Slovenije (PIRS) 2007 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long search string in certain fields in the GUI. NOTE: this may cross privilege boundaries if PIRS is used by data-entry workers who do not have full access to the underlying Windows environment.

Affected configurations

Nvd

Node

republike_slovenijepirsMatch2007

VendorProductVersionCPE
republike_slovenijepirs2007cpe:2.3:a:republike_slovenije:pirs:2007:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
republike_slovenije	pirs	2007	cpe:2.3:a:republike_slovenije:pirs:2007:::::::*

References

lists.grok.org.uk/pipermail/full-disclosure/2007-July/064627.html

osvdb.org/38697

securityreason.com/securityalert/2898

www.pirs.si/slo/index.php?dep_id=29&help_id=60

exchange.xforce.ibmcloud.com/vulnerabilities/35388

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

7.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2007-3815