PT-2007-1373 · Dim3 · Dim3

Luigi Auriemma · Publicado 2007-03-02 · Atualizado 2017-07-29 · CVE-2006-7095

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions dim3 versions 1.5 and earlier

Description The issue is caused by an integer signedness error in the network receive packet function in socket.c, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large data len value. This value is cast to a signed short, resulting in a buffer overflow.

Recommendations For dim3 versions 1.5 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-7095

Produtos afetados

Dim3

Referências · 3

• 🔥 http://aluigi.altervista.org/adv/dim3bof-adv.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-7095 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26082 · Nota