PT-2007-1435 · Google · Google Earth

Alexander Hristov · Published 2007-03-07 · Updated 2018-10-16 · CVE-2006-7157

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Google Earth version 4.0.2091 (beta)

Description A buffer overflow issue allows remote user-assisted attackers to cause a denial of service, resulting in a crash, via a KML or KMZ file containing a long href element.

Recommendations For Google Earth version 4.0.2091 (beta), consider avoiding the use of KML or KMZ files with long href elements until a fix is available. As a temporary workaround, restrict the handling of such files to minimize the risk of a denial of service.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-7157

Affected Products

Google Earth

References · 11

• 🔥 https://exploit-db.com/exploits/28785 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-7157 · Security Note
• http://securityfocus.com/archive/1/archive/1/448544/100/0/threaded · Note
• http://marc.theaimsgroup.com/?l=full-disclosure&m=116068034629718&w=2 · Note
• http://securityfocus.com/archive/1/448544/100/0/threaded · Note
• http://marc.info/?l=full-disclosure&m=116068034629718&w=2 · Note
• http://securitydot.net/xpl/exploits/vulnerabilities/articles/1660/exploit.html · Note
• http://xforce.iss.net/xforce/xfdb/29502 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29502 · Note
• http://securityfocus.com/bid/20464 · Note
• http://securityreason.com/securityalert/2375 · Note