Lucene search

MitreCVE-2007-4535

HistoryAug 25, 2007 - 12:17 a.m.

CVE-2007-4535

2007-08-2500:17:00

mitre

web.nvd.nist.gov

vavoom

remote attack

denial of service

cve-2007-4535

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.101

Percentile

95.0%

JSON

The VStr::Resize function in str.cpp in Vavoom 1.24 and earlier allows remote attackers to cause a denial of service (daemon crash) via a string with a negative NewLen value within a certain UDP packet that triggers an assertion error.

Affected configurations

Nvd

Node

vavoomvavoomRange≤1.24

VendorProductVersionCPE
vavoomvavoom*cpe:2.3:a:vavoom:vavoom:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vavoom	vavoom	*	cpe:2.3:a:vavoom:vavoom::::::::

References

aluigi.altervista.org/adv/vaboom2-adv.txt

secunia.com/advisories/26554

secunia.com/advisories/26701

securityreason.com/securityalert/3057

www.securityfocus.com/bid/25436

bugzilla.redhat.com/show_bug.cgi?id=256621

www.redhat.com/archives/fedora-package-announce/2007-September/msg00094.html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.101

Percentile

95.0%

JSON

Related for CVE-2007-4535