CVE-2007-0315

{"id": "CVE-2007-0315", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-01-18T00:28:00.000", "references": [{"url": "http://sourceforge.net/project/shownotes.php?release_id=475423&group_id=21558", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22057", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/0183", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31500", "source": "cve@mitre.org"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=475423&group_id=21558", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/22057", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/0183", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31500", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in FileZilla before 2.2.30a allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors related to (1) Options.cpp when storing settings in the registry, and (2) the transfer queue (QueueCtrl.cpp). NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer en FileZilla versiones anteriores a 2.2.30a, permiten a atacantes remotos ejecutar c\u00f3digo arbitrario o causar una denegaci\u00f3n de servicio (bloqueo de aplicaci\u00f3n) por medio de vectores no especificados relacionados con (1) el archivo Options.cpp cuando se almacenan configuraciones en el registro, y (2) la cola de transferencia (QueueCtrl.cpp). NOTA: algunos de estos detalles se obtienen de informaci\u00f3n de terceros."}], "lastModified": "2024-11-21T00:25:33.600", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:filezilla:filezilla:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C67196B6-10FD-4A50-93FD-804704AE9980", "versionEndIncluding": "2.2.30"}, {"criteria": "cpe:2.3:a:filezilla:filezilla:0.9.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E2B2E7B-7382-435A-927A-C741807D26F9"}, {"criteria": "cpe:2.3:a:filezilla:filezilla:0.9.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CAFFB48F-EA66-41BE-BC27-20246EA1F620"}, {"criteria": "cpe:2.3:a:filezilla:filezilla:0.9.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58C8F086-2040-4866-9010-990D2D1548CA"}, {"criteria": "cpe:2.3:a:filezilla:filezilla:2.2.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3AC390AF-5CEB-4201-B719-3A1132CBC05C"}, {"criteria": "cpe:2.3:a:filezilla:filezilla:2.2.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CAE0841F-4D10-4E4B-A9E5-3A457C42EFDF"}, {"criteria": "cpe:2.3:a:filezilla:filezilla:2.2.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1593910D-65A2-4909-83F9-696E3E48BB81"}, {"criteria": "cpe:2.3:a:filezilla:filezilla:2.2.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD809934-E3DA-44FC-B927-11481379801A"}, {"criteria": "cpe:2.3:a:filezilla:filezilla:2.2.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A62BFFF0-5048-4010-8F18-FB426F1BAAB3"}, {"criteria": "cpe:2.3:a:filezilla:filezilla:2.2.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E54A9FC-D5DB-423E-9512-EDF9529FD8A9"}, {"criteria": "cpe:2.3:a:filezilla:filezilla:2.2.26a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5D3C4C2-AEB1-4D83-AE6F-D8F4DE2CD231"}, {"criteria": "cpe:2.3:a:filezilla:filezilla:2.2.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF8D7E03-48F0-4CF5-AB02-EB57F978B01B"}, {"criteria": "cpe:2.3:a:filezilla:filezilla:2.2.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE9CCE2B-A7F8-460D-8415-BBE21AF1DF75"}, {"criteria": "cpe:2.3:a:filezilla:filezilla:2.2.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6ECEB364-2691-4189-8504-A70009830759"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "Failed exploit attempts may result in a application level denial-of-service condition."}