CVE

Id
25846  
CVE No.
CVE-2007-2489  
Status
Candidate  
Description
Heap-based buffer overflow in LiveData Protocol Server 5.00.045, and other versions before update 500062 (5.00.062), allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted request for a WSDL file that causes a negative length to be used in a strncpy call.  
Phase
Assigned (20070503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259405 25846 CVE-2007-2489 IDEFENSE:20070502 LiveData Protocol Server Heap Overflow Vulnerability  View
259406 25846 CVE-2007-2489 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=523  View
259407 25846 CVE-2007-2489 CERT-VN:VU#213516  View
259408 25846 CVE-2007-2489 URL:http://www.kb.cert.org/vuls/id/213516  View
259409 25846 CVE-2007-2489 BID:23773  View
259410 25846 CVE-2007-2489 URL:http://www.securityfocus.com/bid/23773  View
259411 25846 CVE-2007-2489 OSVDB:35529  View
259412 25846 CVE-2007-2489 URL:http://osvdb.org/35529  View
259413 25846 CVE-2007-2489 VUPEN:ADV-2007-1633  View
259414 25846 CVE-2007-2489 URL:http://www.vupen.com/english/advisories/2007/1633  View
259415 25846 CVE-2007-2489 SECTRACK:1017998  View
259416 25846 CVE-2007-2489 URL:http://www.securitytracker.com/id?1017998  View
259417 25846 CVE-2007-2489 SECUNIA:25076  View
259418 25846 CVE-2007-2489 URL:http://secunia.com/advisories/25076  View
259419 25846 CVE-2007-2489 XF:livedata-wsdl-bo(34031)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56819 JVNDB-2007-005511 EMC VMware Workstation などの PIIX4 電源管理サブシステムにおける任意のメモリ領域に書き込まれる脆弱性 EMC VMware Workstation および VMware Server の PIIX4 電源管理サブシステムには、任意のメモリ領域に書き込まれる脆弱性が存在します。 CVE-2007-2491 25846 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005511.html  View