CVE

Id
27890  
CVE No.
CVE-2007-4533  
Status
Candidate  
Description
Format string vulnerability in the Say command in sv_main.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a chat message, related to a call to the BroadcastPrintf function.  
Phase
Assigned (20070824)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
287684 27890 CVE-2007-4533 MISC:http://aluigi.altervista.org/adv/vaboom2-adv.txt  View
287685 27890 CVE-2007-4533 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=256621  View
287686 27890 CVE-2007-4533 FEDORA:FEDORA-2007-1977  View
287687 27890 CVE-2007-4533 URL:https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00094.html  View
287688 27890 CVE-2007-4533 BID:25436  View
287689 27890 CVE-2007-4533 URL:http://www.securityfocus.com/bid/25436  View
287690 27890 CVE-2007-4533 SECUNIA:26554  View
287691 27890 CVE-2007-4533 URL:http://secunia.com/advisories/26554  View
287692 27890 CVE-2007-4533 SECUNIA:26701  View
287693 27890 CVE-2007-4533 URL:http://secunia.com/advisories/26701  View
287694 27890 CVE-2007-4533 SREASON:3057  View
287695 27890 CVE-2007-4533 URL:http://securityreason.com/securityalert/3057  View
287696 27890 CVE-2007-4533 XF:vavoom-say-code-execution(36247)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57335 JVNDB-2007-006027 Vavoom の str.cpp におけるサービス運用妨害 (DoS) の脆弱性 Vavoom の str.cpp の VStr::Resize 関数には、サービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2007-4535 27890 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006027.html  View