CVE-2007-3962
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 5.2%
Multiple stack-based buffer overflows in fsplib.c in fsplib before 0.9 might allow remote attackers to execute arbitrary code via (1) a long filename that is not properly handled by the fsp_readdir_native function when MAXNAMLEN is greater than 255, or (2) a long d_name directory (dirent) field in the fsp_readdir function.
Produtos afetados
n/a · n/aReferências
http://bugs.gentoo.org/show_bug.cgi?id=188252http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17&view=markuphttp://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.17&r2=1.18http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.21&r2=1.22http://osvdb.org/38569http://osvdb.org/38570http://secunia.com/advisories/26184http://secunia.com/advisories/26378http://secunia.com/advisories/27501http://security.gentoo.org/glsa/glsa-200711-01.xmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:018http://www.securityfocus.com/bid/25034