PT-2007-1373 · Dim3 · Dim3

Luigi Auriemma · Published 2007-03-02 · Updated 2017-07-29 · CVE-2006-7095

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions dim3 versions 1.5 and earlier

Description The issue is caused by an integer signedness error in the network receive packet function in socket.c, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large data len value. This value is cast to a signed short, resulting in a buffer overflow.

Recommendations For dim3 versions 1.5 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-7095

Affected Products

Dim3

References · 3

• 🔥 http://aluigi.altervista.org/adv/dim3bof-adv.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-7095 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26082 · Note