CVE-2007-2646 Heap-based buffer overflow in yEnc32 1.0.7.207 allows user-assisted remote attackers to execute arbitrary code via a long filename in an NTX file.
MediumCVSS 6.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in yEnc32 1.0.7.207 allows user-assisted remote attackers to execute arbitrary code via a long filename in an NTX file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yenc32 | = 1.0.7.207 | No fix listed |
References
- 36006 vdb-entry
- 25252 patch third-party-advisory vendor-advisory
- 2706 third-party-advisory
- vuln.sg
- 20070512 [vuln.sg] yEnc32 Decoder Long Filename Buffer Overflow Vulnerability mailing-list
- 23948 patch vdb-entry
- ADV-2007-1787 vdb-entry
- yenc32-ntx-bo(34271) vdb-entry