PT-2007-2563 · Webm · Webmplayer

Published 2007-02-27 · Updated 2011-03-08 · CVE-2007-1136

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebMplayer versions prior to 0.6.1-Alpha

Description The issue allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. This is related to the index.php file.

Recommendations For versions prior to 0.6.1-Alpha, update to version 0.6.1-Alpha or later to resolve the issue. As a temporary workaround, consider restricting access to the index.php file to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-1136

Affected Products

Webmplayer

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-1136 · Security Note
• http://osvdb.org/34441 · Note
• http://sourceforge.net/project/shownotes.php?release_id=486880&group_id=172354 · Note
• http://securityfocus.com/bid/22726 · Note
• http://vupen.com/english/advisories/2007/0742 · Note
• http://attrition.org/pipermail/vim/2007-February/001399.html · Note