9.3
CVSSv2

CVE-2007-2062

Published: 18/04/2007 Updated: 16/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in VCDGear 3.55 and 3.56 BETA allows user-assisted remote malicious users to execute arbitrary code via a long FILE argument in a CUE file.

Vulnerable Product Search on Vulmon Subscribe to Product

vcdgear vcdgear 3.56_beta

vcdgear vcdgear 3.55

Exploits

/* ~~~~~~~~~~~~~~0day~~~~~~~~~~~~~~~~~~ Discovered by: InTeL Auther: InTeL Attack Vector: SEH overwrite Type: Local Tested on Win2k SP4 (English) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Software: VCDGear v356 build 050213 Website: wwwvcdgearcom Description: "VCDGear is a program designed to allow a user to extract MPEG streams from CD images, con ...