CVE Vulnerability

CVE-2007-5217

Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) Kazaa 3.2.7 and (2) Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

6.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://secunia.com/advisories/26970 Vendor Advisory
http://secunia.com/advisories/26972 Vendor Advisory
http://www.securityfocus.com/bid/25903
http://osvdb.org/38435
http://osvdb.org/37785
http://www.vupen.com/english/advisories/2007/3336
http://www.vupen.com/english/advisories/2007/3335
https://exchange.xforce.ibmcloud.com/vulnerabilities/36929
Configurations

Configuration 1

cpe:2.3:a:altnet:altnet_download_manager:4.0.0.6:*:*:*:*:*:*:*
cpe:2.3:a:kazaa:kazaa_media_desktop:3.2.7:*:*:*:*:*:*:*
cpe:2.3:a:grokster:grokster:2.6:*:*:*:*:*:*:*
Information

Published : 2007-10-05 12:17

Updated : 2017-07-29 01:33

NVD link : CVE-2007-5217

Mitre link : CVE-2007-5217

Products Affected
No products.
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer