CVE-2007-2998 : The Pascal run-time library (PAS$RTL.EXE) before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 2

The Pascal run-time library (PAS$RTL.EXE) before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS Alpha 8.3, does not properly restore PC and PSL values, which allows local users to cause a denial of service (system crash) via certain Pascal code.

Published 2007-06-04 17:30:00

Updated 2017-07-29 01:31:55

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Exploit prediction scoring system (EPSS) score for CVE-2007-2998

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-2998

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.9	MEDIUM	AV:L/AC:L/Au:N/C:N/I:N/A:C	3.9	6.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

Products affected by CVE-2007-2998

HP » Openvms » Version: 8.3 Integrity Servers Edition
cpe:2.3:o:hp:openvms:8.3:*:integrity_servers:*:*:*:*:*
Matching versions
HP » Openvms » Version: 8.3
cpe:2.3:o:hp:openvms:8.3:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2007-2998

Exploit prediction scoring system (EPSS) score for CVE-2007-2998

CVSS scores for CVE-2007-2998

References for CVE-2007-2998

Products affected by CVE-2007-2998