Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-4337

Опубликовано: 14 авг. 2007
Источник: nvd
CVSS2: 5.8
EPSS Низкий

Описание

Multiple buffer overflows in the httplib_parse_sc_header function in lib/http.c in Streamripper before 1.62.2 allow remote attackers to execute arbitrary code via long (1) Location and (2) Server HTTP headers, a different vulnerability than CVE-2006-3124.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:streamripper:streamripper:1.61.1:*:*:*:*:*:*:*
cpe:2.3:a:streamripper:streamripper:1.61.17:*:*:*:*:*:*:*
cpe:2.3:a:streamripper:streamripper:1.61.24:*:*:*:*:*:*:*
cpe:2.3:a:streamripper:streamripper:1.61.25:*:*:*:*:*:*:*
cpe:2.3:a:streamripper:streamripper:1.61.26:*:*:*:*:*:*:*
cpe:2.3:a:streamripper:streamripper:1.62:*:*:*:*:*:*:*

EPSS

Процентиль: 86%
0.03056
Низкий

5.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 18 лет назад

Multiple buffer overflows in the httplib_parse_sc_header function in lib/http.c in Streamripper before 1.62.2 allow remote attackers to execute arbitrary code via long (1) Location and (2) Server HTTP headers, a different vulnerability than CVE-2006-3124.

debian
около 18 лет назад

Multiple buffer overflows in the httplib_parse_sc_header function in l ...

github
больше 3 лет назад

Multiple buffer overflows in the httplib_parse_sc_header function in lib/http.c in Streamripper before 1.62.2 allow remote attackers to execute arbitrary code via long (1) Location and (2) Server HTTP headers, a different vulnerability than CVE-2006-3124.

EPSS

Процентиль: 86%
0.03056
Низкий

5.8 Medium

CVSS2

Дефекты

CWE-119