PT-2007-2463 · Getid3+1 · Getid3+1

Publicado 2007-02-21 · Atualizado 2017-07-29 · CVE-2007-1035

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: getID3 version 1.7.1

Description: The issue allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files. This is due to an unspecified vulnerability in certain demonstration scripts in getID3, as used in the Mediafield and Audio modules for Drupal.

Recommendations: For getID3 version 1.7.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-1035

Produtos afetados

Drupal

Getid3

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/32542 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1035 · Nota de Segurança
• http://vupen.com/english/advisories/2007/0635 · Nota
• http://osvdb.org/35161 · Nota
• http://securityfocus.com/bid/22587 · Correção
• http://blamcast.net/articles/highly-critical-security-flaws-in-drupal-audio-module · Nota
• http://drupal.org/node/119385 · Aviso do Fabricante