Lucene search

K
cveCertccCVE-2007-4470
HistorySep 10, 2007 - 5:17 p.m.

CVE-2007-4470

2007-09-1017:17:00
CWE-119
certcc
web.nvd.nist.gov
58
cve-2007-4470
earth resource mapping
ncsview
activex control
buffer overflow
remote code execution
security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.103

Percentile

95.0%

Multiple stack-based buffer overflows in the Earth Resource Mapping NCSView ActiveX control before 3.4.0.242 in NCSView.dll, as distributed in ER Mapper ECW JPEG 2000 Plug-in before 8.1, allow remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd
Node
er_mapperimage_web_server_ecw_jpeg_2000_plug-inRange8
VendorProductVersionCPE
er_mapperimage_web_server_ecw_jpeg_2000_plug-in*cpe:2.3:a:er_mapper:image_web_server_ecw_jpeg_2000_plug-in:*:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.103

Percentile

95.0%

Related for CVE-2007-4470