CVE-2007-5155 IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which...
HighCVSS 9.3
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which triggers a stack-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iceows | = 4.20b | No fix listed |
References
- 41381 vdb-entry
- 26973 third-party-advisory vendor-advisory
- vuln.sg exploit
- 25844 vdb-entry
- ADV-2007-3312 vdb-entry
- iceows-icegui-bo(36843) vdb-entry