4.9

CVE-2007-4732

Unspecified vulnerability in the strfreectty function in the Special File System (SPECFS) in Sun Solaris 8 through 10 allows local users to cause a denial of service (system panic), related to passing a NULL pointer to the pgsignal function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Solaris Version 8.0 Edition sparc
Sun ≫ Solaris Version 8.0 Edition x86
Sun ≫ Solaris Version 9.0 Edition sparc
Sun ≫ Solaris Version 9.0 Edition x86
Sun ≫ Solaris Version 10.0 Edition sparc
Sun ≫ Solaris Version 10.0 Edition x86
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.306
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://osvdb.org/37323
http://secunia.com/advisories/26528
Patch
Vendor Advisory
http://secunia.com/advisories/26731
http://securitytracker.com/id?1018643
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103009-1
Patch
http://support.avaya.com/elmodocs2/security/ASA-2007-374.htm
http://www.securityfocus.com/bid/25510
http://www.vupen.com/english/advisories/2007/3031
https://exchange.xforce.ibmcloud.com/vulnerabilities/36379
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2173