CVE-2007-2053
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2007-2053
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple stack-based buffer overflows in AFFLIB before 2.2.6 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) a long LastModified value in an S3 XML response in lib/s3.cpp; (2) a long (a) path or (b) bucket in an S3 URL in lib/vnode_s3.cpp; or (3) a long (c) EFW, (d) AFD, or (c) aimage file path. NOTE: the aimage vector (3c) has since been recalled from the researcher's original advisory, since the code is not called in any version of AFFLIB.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
AFFLIB多个缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AFFLIB是用于操作高级取证格式(AFF)文件的开源函数库。 AFFLIB中存在多个缓冲区溢出漏洞，可能允许攻击者导致取证查看器拒绝服务或执行任意指令。 具体漏洞如下： * LastModified远程栈溢出 * 文件：lib/s3.cpp 行数：113 LastModified字符串通过strcpy(3)拷贝到了固定长度的缓冲区，但最初从XML响应读取字符串时没有执行长度检查，允许恶意的Amazon S3服务器或中间人在S3客户端系统上执行任意指令。111-115行说明了这个问题： /* Make d
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2007-2053
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-2053
请登录查看更多情报信息。
Vendor Advisories for CVE-2007-2053 (6)
Other References for CVE-2007-2053 (2)
Same Patch Batch · n/a · 2007-04-30 · 47 CVEs total
| CVE-2007-2373 | XOOPS 模块WF-Links 'viewcat.php' SQL注入漏洞 | |
| CVE-2007-2376 | Dojo架构JSON JavaScript劫持信息泄露漏洞 | |
| CVE-2007-2378 | Google Web Toolkit 'JavaScript Object Notation'信息泄露漏洞 | |
| CVE-2007-2381 | MochiKit架构JSON JavaScript劫持信息泄露漏洞 | |
| CVE-2007-2382 | Moo.fx架构JSON JavaScript劫持信息泄露漏洞 | |
| CVE-2007-2383 | Prototype架构JSON JavaScript劫持信息泄露漏洞 | |
| CVE-2007-2384 | Script.aculo.us架构JSON JavaScript劫持信息泄露漏洞 | |
| CVE-2007-2385 | Yahoo! UI架构JSON JavaScript劫持信息泄露漏洞 | |
| CVE-2007-2380 | Microsoft Atlas架构JSON JavaScript劫持信息泄露漏洞 | |
| CVE-2007-2374 | Microsoft Windows 未明远程代码执行漏洞 | |
| CVE-2007-2375 | Symantec Enterprise Security Manager 客户端远程升级界面任意代码执行漏洞 | |
| CVE-2007-2372 | Gregory Kokanosky phpMyNewsletter 'send_mod.php'身份认证绕过漏洞 | |
| CVE-2007-2371 | Gregory Kokanosky phpMyNewsletter 'index.php'拒绝服务攻击漏洞 | |
| CVE-2007-2370 | XOOPS John Mordo Jobs 'index.php' SQL注入漏洞 | |
| CVE-2007-2369 | WebSPELL 'picture.php'目录遍历漏洞 | |
| CVE-2007-2368 | WebSPELL 'picture.php'信息泄露漏洞 | |
| CVE-2007-2367 | Wserve HTTP Server GET请求远程溢出漏洞 | |
| CVE-2006-7201 | EMC RSA Security SiteKey 'SiteKey Flash'令牌权限管理和访问控制漏洞 | |
| CVE-2006-7200 | EMC RSA Security SiteKey "挑战-绕过" 令牌认证绕过漏洞 | |
| CVE-2006-7199 | EMC RSA Security SiteKey 中间人攻击漏洞 |
Showing top 20 of 47 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2007-2053
No comments yet