CVE-2007-6537 Stack-based buffer overflow in the zfile_gunzip function in zfile.c in WinUAE 1.4.4 and earlier allows user-assisted remote attackers to execute arbitrary code via a long filename in a gzipped archive...
MediumCVSS 6.8
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the zfile_gunzip function in zfile.c in WinUAE 1.4.4 and earlier allows user-assisted remote attackers to execute arbitrary code via a long filename in a gzipped archive, such as a (1) gz, (2) adz, (3) roz, or (4) hdz archive in a compressed floppy disk image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| winuae | = 1.4.4 | No fix listed |
References
- aluigi.altervista.org
- aluigi.org
- 39902 vdb-entry
- 28208 third-party-advisory
- 3487 third-party-advisory
- 20071221 Buffer-overflow in WinUAE 1.4.4 mailing-list
- 26979 exploit patch vdb-entry
- ADV-2007-4306 vdb-entry
- www.winuae.net