CVE-2007-4725

EPSS 15.87%
Veröffentlicht 05.09.2007 19:17:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

7-zip ≫ 7-zip Version <= 4.42

7-zip ≫ 7-zip Version4.43 Updatebeta

7-zip ≫ 7-zip Version4.44 Updatebeta

7-zip ≫ 7-zip Version4.45 Updatebeta

7-zip ≫ 7-zip Version4.46 Updatebeta

7-zip ≫ 7-zip Version4.47 Updatebeta

7-zip ≫ 7-zip Version4.48 Updatebeta

7-zip ≫ 7-zip Version4.49 Updatebeta

7-zip ≫ 7-zip Version4.50 Updatebeta

7-zip ≫ 7-zip Version4.51 Updatebeta

7-zip ≫ 7-zip Version4.52 Updatebeta

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	15.87%	0.945

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

http://akky.cjb.net/security/7-zip3.txt

Broken Link

http://jvn.jp/jp/JVN%2362868899/index.html

Third Party Advisory

http://osvdb.org/40482

Broken Link

http://secunia.com/advisories/26624

Third Party Advisory

http://sourceforge.net/project/shownotes.php?release_id=535160&group_id=14481

Third Party Advisory

Product

http://www.securityfocus.com/bid/25545