CVE-2007-3314

Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portable Executable Viewer 1.00 (English Trial), allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://osvdb.org/37579
http://secunia.com/advisories/25732	Vendor Advisory
http://vuln.sg/salamander25-en.html	Exploit
http://www.securityfocus.com/bid/24557
http://www.vupen.com/english/advisories/2007/2268
https://exchange.xforce.ibmcloud.com/vulnerabilities/34938

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:altap:portable_executable_viewer:2.02::english_trial:::::
	cpe:2.3:a:altap:servant_salamander:2.5:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:altap:portable_executable_viewer:1.00::english_trial:::::
	cpe:2.3:a:altap:servant_salamander:2.0:::::::*

History

No history.

Information

Published : 2007-06-21 18:30

Updated : 2017-07-29 01:32

NVD link : CVE-2007-3314

Mitre link : CVE-2007-3314

CVE.ORG link : CVE-2007-3314

JSON object : View

Products Affected

altap

servant_salamander
portable_executable_viewer

CWE

NVD-CWE-Other

{"id": "CVE-2007-3314", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-06-21T18:30:00.000", "references": [{"url": "http://osvdb.org/37579", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/25732", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://vuln.sg/salamander25-en.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/24557", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/2268", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34938", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portable Executable Viewer 1.00 (English Trial), allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en el peviewer.spl del Altap Servant Salamander 2.5 con Portable Executable Viewer 2.02 (English Trial) y 2.0 con el Portable Executable Viewer 1.00 (English Trial), permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un nombre de fichero PDB debug largo en un fichero PE."}], "lastModified": "2017-07-29T01:32:09.893", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:altap:portable_executable_viewer:2.02:*:english_trial:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2413620C-3733-4EA9-A3DC-610F51115B30"}, {"criteria": "cpe:2.3:a:altap:servant_salamander:2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "724DDDA3-E43A-4FB6-9EC3-CA4FDB04D6A1"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:altap:portable_executable_viewer:1.00:*:english_trial:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D65118E-3262-48E4-8CBE-C282FD0EDEE0"}, {"criteria": "cpe:2.3:a:altap:servant_salamander:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7EAB07E9-BF9A-45FA-AE20-75BD8B4B14FF"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}