PT-2007-4038 · Newzcrawler · Newzcrawler

Gbr · Publicado 2007-05-16 · Atualizado 2017-10-11 · CVE-2007-2722

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions NewzCrawler version 1.8

Description The issue allows remote attackers to cause application instability via certain invalid strings in the URL attribute of an ENCLOSURE element. This can be achieved with specific sequences such as %s, %Y, %%, and n,.

Recommendations For NewzCrawler version 1.8, as a temporary workaround, consider restricting the use of the ENCLOSURE element or validating the input strings to prevent instability until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-2722

Produtos afetados

Newzcrawler

Referências · 5

• 🔥 https://exploit-db.com/exploits/3930 · Exploit
• http://osvdb.org/39768 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34350 · Nota
• http://securityfocus.com/bid/23994 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2722 · Nota de Segurança