CVE

Id
27904  
CVE No.
CVE-2007-4547  
Status
Candidate  
Description
Unreal Commander 0.92 build 565 and 573 writes portions of heap memory into local files when extracting from an archive with malformed size information in a file header, which might allow user-assisted attackers to obtain sensitive information (memory contents) by reading the extracted files. NOTE: this issue is only a vulnerability if Unreal is run with privileges, or if the extracted files are made accessible to other users.  
Phase
Assigned (20070827)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
287861 27904 CVE-2007-4547 BUGTRAQ:20070823 X-Diesel Unreal Commander v0.92 (build 573) multiple vulnerabilities  View
287862 27904 CVE-2007-4547 URL:http://www.securityfocus.com/archive/1/archive/1/477432/100/0/threaded  View
287863 27904 CVE-2007-4547 BID:25419  View
287864 27904 CVE-2007-4547 URL:http://www.securityfocus.com/bid/25419  View
287865 27904 CVE-2007-4547 OSVDB:45832  View
287866 27904 CVE-2007-4547 URL:http://osvdb.org/45832  View
287867 27904 CVE-2007-4547 SREASON:3060  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53858 JVNDB-2007-002550 ALPass におけるバッファオーバーフローの脆弱性 ALPass 英語および ALPass 韓国語には、バッファオーバーフローの脆弱性が存在します。 CVE-2007-4549 27904 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002550.html  View