PT-2007-7195 · Dosbox · Dosbox

Published 2007-12-13 · Updated 2024-08-07 · CVE-2007-6328

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DOSBox versions 0.72 and earlier

Description The issue allows local users to obtain access to the filesystem on the host operating system via the mount command.

Recommendations For versions 0.72 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2007-6328

Affected Products

Dosbox

References · 11

• https://osv.dev/vulnerability/CVE-2007-6328 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-6328 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6328 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2007-6328 · Vendor Advisory
• http://securityfocus.com/bid/26802 · Note
• http://osvdb.org/44766 · Note
• http://securityreason.com/securityalert/3442 · Note
• http://vupen.com/english/advisories/2007/4170 · Note
• http://securityfocus.com/archive/1/484835/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38970 · Note
• http://aluigi.org/poc/dosboxxx.zip · Note