nvd-json-data-feeds/CVE-2007/CVE-2007-01xx/CVE-2007-0180.json

{
  "id": "CVE-2007-0180",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2007-01-11T00:28:00.000",
  "lastModified": "2024-11-21T00:25:11.080",
  "vulnStatus": "Modified",
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in EF Commander 5.75 allows user-assisted attackers to execute arbitrary code via a crafted ISO file containing a file within several nested directories, which produces a large filename that triggers the overflow."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en pila en el EF Commander 5.75 permite a atacantes con la intervenci\u00f3n del usuario ejecutar c\u00f3digo de su elecci\u00f3n mediente un archivo ISO modificado que contiene ficheros con varios directorios anidados, lo que provoca un nombre de fichero largo que dispara un desbordamiento."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
          "baseScore": 7.6,
          "accessVector": "NETWORK",
          "accessComplexity": "HIGH",
          "authentication": "NONE",
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "availabilityImpact": "COMPLETE"
        },
        "baseSeverity": "HIGH",
        "exploitabilityScore": 4.9,
        "impactScore": 10.0,
        "acInsufInfo": false,
        "obtainAllPrivilege": true,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ef_software:ef_commander:5.75:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B36D010-4C94-4173-9EA3-D6D11DDB9F9C"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://osvdb.org/32660",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/23659",
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://vuln.sg/efcommander575-en.html",
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securityfocus.com/bid/21969",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31365",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/32660",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/23659",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://vuln.sg/efcommander575-en.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securityfocus.com/bid/21969",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31365",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}