PT-2007-4405 · Zvbi · Zvbi

Publicado 2007-06-07 · Atualizado 2011-03-08 · CVE-2007-3121

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: ZVBI versions prior to 0.2.25

Description: The issue is related to a buffer overflow in the CCdecode function, which can lead to a denial of service (application crash) and potentially allow execution of arbitrary code when handling long data during a reception error.

Recommendations: For versions prior to 0.2.25, update to version 0.2.25 or later to resolve the issue. As a temporary workaround, consider restricting the input data length to prevent buffer overflow until a patch is applied.

Correção

Identificadores relacionados

CVE-2007-3121

Produtos afetados

Zvbi

Referências · 7

• https://osv.dev/vulnerability/DEBIAN-CVE-2007-3121 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/2088 · Nota
• https://security-tracker.debian.org/tracker/CVE-2007-3121 · Aviso do Fabricante
• http://sourceforge.net/project/shownotes.php?release_id=492374&group_id=2599 · Correção
• http://osvdb.org/43454 · Nota
• https://osv.dev/vulnerability/CVE-2007-3121 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-3121 · Nota de Segurança