PT-2007-4405 · Zvbi · Zvbi

Published 2007-06-07 · Updated 2011-03-08 · CVE-2007-3121

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: ZVBI versions prior to 0.2.25

Description: The issue is related to a buffer overflow in the CCdecode function, which can lead to a denial of service (application crash) and potentially allow execution of arbitrary code when handling long data during a reception error.

Recommendations: For versions prior to 0.2.25, update to version 0.2.25 or later to resolve the issue. As a temporary workaround, consider restricting the input data length to prevent buffer overflow until a patch is applied.

Fix

Related Identifiers

CVE-2007-3121

Affected Products

Zvbi

References · 7

• https://osv.dev/vulnerability/DEBIAN-CVE-2007-3121 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-3121 · Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=492374&group_id=2599 · Patch
• https://osv.dev/vulnerability/CVE-2007-3121 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3121 · Security Note
• http://vupen.com/english/advisories/2007/2088 · Note
• http://osvdb.org/43454 · Note