9.3
CVSSv2

CVE-2007-2568

Published: 16/05/2007 Updated: 29/07/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote malicious users to execute arbitrary code via a long (1) tag or (2) track type in a CUE file.

Vulnerable Product Search on Vulmon Subscribe to Product

vcdgear vcdgear 3.55

Exploits

#!/usr/bin/ruby ''' # Author: Provensec wwwprovenseccom <advisories@provenseccom > # Tested on XP SP3 / Windows 7 # Description: VCDGEAR 350 is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied input # An attacker can exploit this issue to execute arb ...