PT-2007-2563 · Webm · Webmplayer

Publicado 2007-02-27 · Atualizado 2011-03-08 · CVE-2007-1136

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebMplayer versions prior to 0.6.1-Alpha

Description The issue allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. This is related to the index.php file.

Recommendations For versions prior to 0.6.1-Alpha, update to version 0.6.1-Alpha or later to resolve the issue. As a temporary workaround, consider restricting access to the index.php file to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-1136

Produtos afetados

Webmplayer

Referências · 6

• http://osvdb.org/34441 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=486880&group_id=172354 · Nota
• http://securityfocus.com/bid/22726 · Nota
• http://vupen.com/english/advisories/2007/0742 · Nota
• http://attrition.org/pipermail/vim/2007-February/001399.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1136 · Nota de Segurança