PT-2007-1664 · Ef · Ef Commander

Publicado 2007-01-11 · Atualizado 2017-07-29 · CVE-2007-0180

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EF Commander version 5.75

Description The issue is a stack-based buffer overflow that allows attackers to execute arbitrary code. This is achieved through a crafted ISO file containing a file within several nested directories, resulting in a large filename that triggers the overflow.

Recommendations For EF Commander version 5.75, update to a newer version that contains a fix for this issue. As a temporary workaround, consider avoiding the use of crafted ISO files that could trigger the buffer overflow.

Exploit

Correção

Identificadores relacionados

CVE-2007-0180

Produtos afetados

Ef Commander

Referências · 6

• 🔥 http://vuln.sg/efcommander575-en.html · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31365 · Nota
• http://osvdb.org/32660 · Nota
• http://securityfocus.com/bid/21969 · Nota
• http://secunia.com/advisories/23659 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-0180 · Nota de Segurança