NVD

Id
56762  
Name
CVE-2007-4642  
Description
Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote attackers to execute arbitrary code via a long chat (PKT_CHAT) message that is not properly handled by the (1) D_NetPlayerEvent function in d_net.c or the (2) Msg_Write function in net_msg.c, or (3) many commands that are not properly handled by the NetSv_ReadCommands function in d_netsv.c; or (4) cause a denial of service (daemon crash) via a chat (PKT_CHAT) message without a final "" character.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-08-31  
Modified Date
2008-09-05  
Seq
2007-4642  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
289336 56762 CVE-2007-4642 http://aluigi.altervista.org/adv/dumsdei-adv.txt  View
289337 56762 CVE-2007-4642 http://aluigi.org/poc/dumsdei.zip  View
289338 56762 CVE-2007-4642 http://bugs.gentoo.org/show_bug.cgi?id=190835  View
289339 56762 CVE-2007-4642 GLSA-200802-02  View
289340 56762 CVE-2007-4642 3084  View
289341 56762 CVE-2007-4642 20070829 Multiple vulnerabilities in Doomsday 1.9.0-beta5.1  View
289342 56762 CVE-2007-4642 25483  View
289343 56762 CVE-2007-4642 doomsday-dnetplayerevent-bo(36332)  View
289344 56762 CVE-2007-4642 doomsday-msgwrite-bo(36333)  View
289345 56762 CVE-2007-4642 doomsday-netsvreadcommands-bo(36334)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53881 JVNDB-2007-002573 Doomsday におけるバッファオーバーフローの脆弱性 Doomsday には、バッファオーバーフローの脆弱性が存在します。 CVE-2007-4642 27997 CVE-2007-4642 56762 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002573.html 2007-08-31 2012-06-26 View