CVE-2007-3480 - PCSoft WinDEV 11 (01F110053p) allows user-assisted remote attackers to cause a denial of service (in

CVE-2007-3480

Summary

PCSoft WinDEV 11 (01F110053p) allows user-assisted remote attackers to cause a denial of service (infinite loop and resource consumption) via a malformed WDP project file.

References

http://osvdb.org/38909
http://www.securityfocus.com/archive/1/472438/100/0/threaded
https://www.securinfos.info/english/security-advisories-alerts/20070628_PCSoft.WinDEV.wdp.Project.File.Handling.Buffer.Overflow.php

Vulnerable Configurations

cpe:2.3:a:pc_soft:windev:11:*:*:*:*:*:*:*
cpe:2.3:a:pc_soft:windev:11:*:*:*:*:*:*:*

CVSS

Base:	7.1 (as of 16-10-2018 - 16:50)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	COMPLETE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:N/A:C

refmap via4

bugtraq	20070628 [SecurInfos] PCSoft WinDEV .wdp Project File Handling Buffer Overflow
misc	https://www.securinfos.info/english/security-advisories-alerts/20070628_PCSoft.WinDEV.wdp.Project.File.Handling.Buffer.Overflow.php
osvdb	38909

Last major update

16-10-2018 - 16:50

Published

28-06-2007 - 18:30

Last modified

16-10-2018 - 16:50