PT-2007-6238 · Microsoft · Windows Xp

Publicado 2007-10-01 · Atualizado 2018-10-30 · CVE-2007-5145

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP (affected versions not specified)

Description The issue is related to multiple buffer overflows in system DLL files in Microsoft Windows XP, which can be exploited by user-assisted remote attackers to cause a denial of service, resulting in an application crash. This can occur when long strings are used in certain Properties fields of a file, such as author, title, subject, and comment. The vulnerability may involve improper handling of extended file attributes by various functions in ntdll.dll and kernel32.dll, including NtQueryInformationFile, NtQueryDirectoryFile, NtSetInformationFile, GetFileAttributesExW, and GetFileAttributesW.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-5145

Produtos afetados

Windows Xp

Referências · 4

• 🔥 http://lostmon.blogspot.com/2007/06/buffer-overflow-in-extended-file.html · Exploit
• http://osvdb.org/41064 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5145 · Nota de Segurança
• http://osvdb.org/41065 · Nota