NVD

Id
58081  
Name
CVE-2007-6060  
Description
AhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a filename string at a location indicated by the "Filename length" field in a ZIP header, which allows remote attackers to cause a denial of service (machine crash) and possibly execute arbitrary code via a ZIP file in which this field"s value is larger than the actual number of bytes in the filename.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-11-20  
Modified Date
2011-03-07  
Seq
2007-6060  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
297556 58081 CVE-2007-6060 http://global.ahnlab.com/global/notice_view.ESD?fmethod=view&press_seq=803&printNum=2  View
297557 58081 CVE-2007-6060 3382  View
297558 58081 CVE-2007-6060 http://secway.org/advisory/AD20071116.txt  View
297559 58081 CVE-2007-6060 20071116 AhnLab AntiVirus Remote Kernel Memory Corruption  View
297560 58081 CVE-2007-6060 26473  View
297561 58081 CVE-2007-6060 1018977  View
297562 58081 CVE-2007-6060 ADV-2007-3983  View
297563 58081 CVE-2007-6060 ahnlab-antivirus-zip-code-execution(38514)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54223 JVNDB-2007-002915 AhnLab Antivirus Internet Security Platinum におけるサービス運用妨害 (DoS) の脆弱性 AhnLab Antivirus Internet Security Platinum は、ZIP ヘッダ内の "Filename length" フィールドが示す領域で、ファイル名の文字列にデータを追加するため、サービス運用妨害 (マシンクラッシュ) 状態となり、任意のコードを実行される脆弱性が存在します。 CVE-2007-6060 29415 CVE-2007-6060 58081 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002915.html 2007-11-20 2012-06-26 View