Vulnerabilities > CVE-2007-2758 - Buffer Overflow vulnerability in Winimage 8.0.8000

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
winimage
critical
NVD
Published: 2007-05-18
Updated: 2017-07-29

Summary

Multiple buffer overflows in WinImage 8.0.8000 allow user-assisted remote attackers to execute arbitrary code via a FAT image that contains long directory names in a deeply nested directory structure, which triggers (1) a stack-based buffer overflow during extraction, or (2) a heap-based buffer overflow during traversal.

Vulnerable Configurations

Part Description Count
Application
Winimage
1

References