10

CVE-2007-5580

Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port (1) 139 or (2) 445.

Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Security Agent Version2.1
Cisco ≫ Security Agent Version3
Cisco ≫ Security Agent Version4.0
Cisco ≫ Security Agent Version4.0.1
Cisco ≫ Security Agent Version4.0.2
Cisco ≫ Security Agent Version4.0.3
Cisco ≫ Security Agent Version4.0.3.728
Cisco ≫ Security Agent Version4.5
Cisco ≫ Security Agent Version4.5.1
Cisco ≫ Security Agent Version4.5.1.639
Cisco ≫ Security Agent Version4.5.1.657
Cisco ≫ Security Agent Version4.5.1.659
Cisco ≫ Security Agent Version5.0
Cisco ≫ Security Agent Version5.0.0.201
Cisco ≫ Security Agent Version5.0.193
Cisco ≫ Security Agent Version5.1
Cisco ≫ Security Agent Version5.1.79
Cisco ≫ Security Agent Version5.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 16.47% 0.946
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.