Vulnerabilities > CVE-2007-2761 - Stack Buffer Overflow vulnerability in Magic ISO Maker Cue File
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Stack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to execute arbitrary code via a long filename in a .cue file.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description MagicISO. CVE-2007-2761. Dos exploit for linux platform file exploits/linux/dos/3945.rb id EDB-ID:3945 last seen 2016-01-31 modified 2007-05-17 platform linux port published 2007-05-17 reporter n00b source https://www.exploit-db.com/download/3945/ title MagicISO <= 5.4 build239 - .cue Heap Overflow PoC type dos description MagicISO. CVE-2007-2761. Local exploit for windows platform id EDB-ID:3975 last seen 2016-01-31 modified 2007-05-23 published 2007-05-23 reporter vade79 source https://www.exploit-db.com/download/3975/ title MagicISO <= 5.4 build239 .cue File Local Buffer Overflow Exploit
References
- http://osvdb.org/36077
- http://secunia.com/advisories/25325
- http://www.securityfocus.com/archive/1/469302/100/0/threaded
- http://www.securityfocus.com/bid/24029
- http://www.vupen.com/english/advisories/2007/1865
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34346
- https://www.exploit-db.com/exploits/3945