CVE-2007-1719 : Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local users to

Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local users to execute arbitrary code via a long command line argument, possibly involving the device name.

Published 2007-03-28 00:19:00

Updated 2017-10-11 01:31:58

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Exploit prediction scoring system (EPSS) score for CVE-2007-1719

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-1719

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

Products affected by CVE-2007-1719

Jason W. Bacon » Mcweject » Version: 0.9
cpe:2.3:a:jason_w._bacon:mcweject:0.9:*:*:*:*:*:*:*
Matching versions
When used together with: Freebsd » Freebsd » Version: 6.2 Update Stable

Vulnerability Details : CVE-2007-1719

Exploit prediction scoring system (EPSS) score for CVE-2007-1719

CVSS scores for CVE-2007-1719

References for CVE-2007-1719

Products affected by CVE-2007-1719