Vulnerability Details : CVE-2007-4816
Potential exploit
Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long (1) URL, (2) backImage, or (3) titleImage property value; (4) a long first argument to the advancedOpen method; a long argument to the (5) isDVDPath or (6) rawParse method; or (7) a .smpl file with a long path attribute in an item element in a PlayList.
Products affected by CVE-2007-4816
- cpe:2.3:a:baofeng:storm:2.9:*:*:*:*:*:*:*
- cpe:2.3:a:baofeng:storm:2.8:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2007-4816
19.85%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 95 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2007-4816
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
CWE ids for CVE-2007-4816
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2007-4816
-
http://www.vupen.com/english/advisories/2007/3111
-
https://www.exploit-db.com/exploits/4375
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/36542
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/36540
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/36543
-
http://secunia.com/advisories/26749
-
http://www.milw0rm.com/sploits/09082007-storm.zip
Exploit
-
http://www.securityfocus.com/bid/25601
Exploit
-
http://osvdb.org/40491
Jump to