Lucene search

K
cve[email protected]CVE-2007-4943
HistorySep 18, 2007 - 7:17 p.m.

CVE-2007-4943

2007-09-1819:17:00
CWE-119
web.nvd.nist.gov
23
cve-2007-4943
buffer overflow
activex control
baofeng storm 2.8
remote code execution
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.359 Low

EPSS

Percentile

97.2%

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD
Node
baofengstormRange2.8
CPENameOperatorVersion
baofeng:stormbaofeng stormle2.8

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.359 Low

EPSS

Percentile

97.2%

Related for CVE-2007-4943