PT-2007-7042 · Xunlei · Xunlei Thunder

Publicado 2007-11-27 · Atualizado 2011-03-08 · CVE-2007-6144

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xunlei Thunder version 5.7.4.401

Description A heap-based buffer overflow issue exists in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll, allowing remote attackers to execute arbitrary code via a long string in a FlvPlayerUrl property value.

Recommendations For Xunlei Thunder version 5.7.4.401, consider disabling the PPlayer.XPPlayer.1 ActiveX control until a patch is available to prevent exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-6144

Produtos afetados

Xunlei Thunder

Referências · 7

• 🔥 http://sebug.net/exploit/2575 · Exploit
• 🔥 http://nohack.cn/hacknews/20071119/1916.html · Exploit
• http://securityfocus.com/bid/26536 · Nota
• http://osvdb.org/39680 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6144 · Nota de Segurança
• http://vupen.com/english/advisories/2007/3982 · Nota
• http://secunia.com/advisories/27795 · Aviso do Fabricante