Lucene search

CertccCVE-2007-6253

HistoryMar 12, 2008 - 12:44 a.m.

CVE-2007-6253

2008-03-1200:44:00

CWE-119

certcc

web.nvd.nist.gov

cve

2007

6253

buffer overflows

adobe

form designer

form client

remote code execution

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.106

Percentile

95.1%

JSON

Multiple buffer overflows in Adobe Form Designer 5.0 and Form Client 5.0 allow remote attackers to execute arbitrary code via unknown vectors in the (1) Adobe File Dialog Button (FileDlg.dll) and the (2) Adobe Copy to Server Object (SvrCopy.dll) ActiveX controls.

Affected configurations

Nvd

Node

adobeform_clientMatch5.0

adobeform_designerMatch5.0

VendorProductVersionCPE
adobeform_client5.0cpe:2.3:a:adobe:form_client:5.0:*:*:*:*:*:*:*
adobeform_designer5.0cpe:2.3:a:adobe:form_designer:5.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	form_client	5.0	cpe:2.3:a:adobe:form_client:5.0:::::::*
adobe	form_designer	5.0	cpe:2.3:a:adobe:form_designer:5.0:::::::*

References

secunia.com/advisories/29330

www.adobe.com/support/security/bulletins/apsb08-09.html

www.kb.cert.org/vuls/id/362849

www.securityfocus.com/bid/28210

www.securitytracker.com/id?1019601

www.vupen.com/english/advisories/2008/0863/references

exchange.xforce.ibmcloud.com/vulnerabilities/41142

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.106

Percentile

95.1%

JSON

Related for CVE-2007-6253