NVD

Id
56017  
Name
CVE-2007-3873  
Description
Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap (VST) feature is enabled, allows local users to cause a denial of service (service crash) or execute arbitrary code via a file with a long pathname, which triggers the overflow during a ReadDirectoryChangesW callback notification.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-08-22  
Modified Date
2011-03-07  
Seq
2007-3873  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
285187 56017 CVE-2007-3873 http://esupport.trendmicro.com/support/consumer/search.do?cmd=displayKC&externalId=PUB-en-1035845  View
285188 56017 CVE-2007-3873 20070820 Trend Micro SSAPI Long Path Buffer Overflow Vulnerability  View
285189 56017 CVE-2007-3873 1018592  View
285190 56017 CVE-2007-3873 25388  View
285191 56017 CVE-2007-3873 ADV-2007-2935  View
285192 56017 CVE-2007-3873 antispyware-vstlib-bo(36144)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57179 JVNDB-2007-005871 Trend Micro AntiSpyware および PC-Cillin Internet Security 2007 の SSAPI Engine におけるスタックベースのバッファオーバーフローの脆弱性 Trend Micro AntiSpyware および PC-Cillin Internet Security 2007 の SSAPI Engine の vstlib32.dll には、Venus Spy Trap (VST) 機能が有効になっている際、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-3873 27228 CVE-2007-3873 56017 6.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005871.html 2007-08-22 2012-12-20 View