9.3

CVE-2007-2514

Stack-based buffer overflow in XferWan.exe as used in multiple products including (1) Symantec Discovery 6.5, (2) Numara Asset Manager 8.0, and (3) Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation duplicate of CVE-2007-1173.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Centennial ≫ Discovery Version2006_featurepack1
Numara ≫ Asset Manager Version8.0
Symantec ≫ Discovery Version6.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.74% 0.907
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://dvlabs.tippingpoint.com/advisory/TPTI-07-10
Patch
http://osvdb.org/42059
http://securityreason.com/securityalert/2785
http://www.securityfocus.com/archive/1/470563/100/0/threaded
http://www.securityfocus.com/bid/24317
Patch
http://www.securitytracker.com/id?1018191
https://exchange.xforce.ibmcloud.com/vulnerabilities/34723