Lucene search

MitreCVE-2007-6533

HistoryDec 27, 2007 - 11:46 p.m.

CVE-2007-6533

2007-12-2723:46:00

CWE-119

mitre

web.nvd.nist.gov

zoom player

buffer overflow

remote code execution

cve-2007-6533

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

High

EPSS

0.247

Percentile

96.7%

JSON

Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message.

Affected configurations

Nvd

Node

inmatrixzoom_playerMatch5

inmatrixzoom_playerMatch6.00beta2

VendorProductVersionCPE
inmatrixzoom_player5cpe:2.3:a:inmatrix:zoom_player:5:*:*:*:*:*:*:*
inmatrixzoom_player6.00beta2cpe:2.3:a:inmatrix:zoom_player:6.00beta2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
inmatrix	zoom_player	5	cpe:2.3:a:inmatrix:zoom_player:5:::::::*
inmatrix	zoom_player	6.00beta2	cpe:2.3:a:inmatrix:zoom_player:6.00beta2:::::::*

References

aluigi.altervista.org/adv/zoomprayer-adv.txt

osvdb.org/39872

secunia.com/advisories/28214

securityreason.com/securityalert/3486

www.securityfocus.com/archive/1/485499/100/0/threaded

www.securityfocus.com/bid/27007

www.vupen.com/english/advisories/2007/4309

exchange.xforce.ibmcloud.com/vulnerabilities/39262

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

High

EPSS

0.247

Percentile

96.7%

JSON

Related for CVE-2007-6533