CVE-2007-5252 Buffer overflow in NetSupport Manager (NSM) Client 10.00 and 10.20, and NetSupport School Student (NSS) 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code....
HighCVSS 10.0
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in NetSupport Manager (NSM) Client 10.00 and 10.20, and NetSupport School Student (NSS) 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor statement, which is too vague to be sure that it is for this particular issue, says that only a denial of service is possible.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netsupport manager client | = 10.00 | No fix listed |
| netsupport manager client | = 10.20 | No fix listed |
| netsupport school student | = 9.00 | No fix listed |
References
- 27082 third-party-advisory
- 3198 third-party-advisory
- www.netsupportsoftware.com patch
- 20071004 DDIVRT-2007-05 NetSupport Manager Client Buffer Overflow mailing-list
- 25932 patch vdb-entry
- 1018774 vdb-entry
- netsupport-unspecified-dos(36963) vdb-entry