CVE-2007-4051 - Heap-based buffer overflow in the FindFiles function in UltraDefrag 1.0.3 allows local users to gain

CVE-2007-4051

Summary

Heap-based buffer overflow in the FindFiles function in UltraDefrag 1.0.3 allows local users to gain privileges via a file with a long pathname. NOTE: some of these details are obtained from third party information.

References

http://osvdb.org/38624
http://secunia.com/advisories/26233
http://sourceforge.net/project/showfiles.php?group_id=199532&package_id=236738&release_id=527964
http://sourceforge.net/project/shownotes.php?group_id=199532&release_id=527964
http://www.securityfocus.com/bid/25102
https://exchange.xforce.ibmcloud.com/vulnerabilities/35654

Vulnerable Configurations

cpe:2.3:a:ultradefrag:ultradefrag:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ultradefrag:ultradefrag:1.0.3:*:*:*:*:*:*:*

CVSS

Base:	4.6 (as of 29-07-2017 - 01:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	25102
confirm	http://sourceforge.net/project/showfiles.php?group_id=199532&package_id=236738&release_id=527964 http://sourceforge.net/project/shownotes.php?group_id=199532&release_id=527964
osvdb	38624
secunia	26233
xf	ultradefrag-findfiles-bo(35654)

Last major update

29-07-2017 - 01:32

Published

30-07-2007 - 16:30

Last modified

29-07-2017 - 01:32