CVE-2007-4375

23Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendepss 3.4%

de la publicación al arma1 días

Publicada en NVD16 ago

1ª PoC+1d

probabilidad de explotación

3.4%top 12% de las CVE

explotación observada

noninguna fuente lo reporta

1 exploit(s) público(s)

The administrative interface (aka DkService.exe) in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to (1) obtain sensitive information (process memory contents), as demonstrated by an attack that obtains module base addresses to defeat Address Space Layout Randomization (ASLR); or (2) cause a denial of service (application crash) via an out-of-bounds address.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/4292

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065245.html http://osvdb.org/39546 http://osvdb.org/39547 http://secunia.com/advisories/26431 http://securityreason.com/securityalert/3018 https://exchange.xforce.ibmcloud.com/vulnerabilities/36007 https://exchange.xforce.ibmcloud.com/vulnerabilities/36008 http://www.securityfocus.com/archive/1/476954/100/0/threaded http://www.securityfocus.com/bid/25320