CVE Vulnerability

CVE-2007-2952

Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and (2) man-in-the-middle attackers to execute arbitrary code via an HTTP response with a long HTTP version field.

9.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

References
Link Resource
http://secunia.com/secunia_research/2007-61/advisory/ Vendor Advisory
http://secunia.com/secunia_research/2007-64/advisory/ Vendor Advisory
http://secunia.com/advisories/25813 Vendor Advisory
http://www.securitytracker.com/id?1020588
http://www.securitytracker.com/id?1020587
http://www.securityfocus.com/bid/30463
http://www.securityfocus.com/bid/30464
http://www.vupen.com/english/advisories/2008/2263/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/44124
https://exchange.xforce.ibmcloud.com/vulnerabilities/44123
http://www.securityfocus.com/archive/1/494984/100/0/threaded
http://www.securityfocus.com/archive/1/494975/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:blue_coat_systems:filter:3.2.32:*:*:*:*:*:*:*
cpe:2.3:a:blue_coat_systems:k9_web_protection:3.2.44:*:*:*:*:*:*:*
Information

Published : 2008-08-01 02:41

Updated : 2018-10-16 04:46

NVD link : CVE-2007-2952

Mitre link : CVE-2007-2952

Products Affected
No products.
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer