CVE-2007-5145

Multiple buffer overflows in system DLL files in Microsoft Windows XP, as used by Microsoft Windows Explorer (explorer.exe) 6.00.2900.2180, Don Ho Notepad++, unspecified Adobe Macromedia applications, and other programs, allow user-assisted remote attackers to cause a denial of service (application crash) via long strings in the (1) author, (2) title, (3) subject, and (4) comment Properties fields of a file, possibly involving improper handling of extended file attributes by the (a) NtQueryInformationFile, (b) NtQueryDirectoryFile, (c) NtSetInformationFile, (d) FileAllInformation, (e) FileNameInformation, and other FILE_INFORMATION_CLASS functions in ntdll.dll and the (f) GetFileAttributesExW and (g) GetFileAttributesW functions in kernel32.dll, a related issue to CVE-2007-1347.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://lostmon.blogspot.com/2007/06/buffer-overflow-in-extended-file.html	Exploit
http://osvdb.org/41064
http://osvdb.org/41065
http://lostmon.blogspot.com/2007/06/buffer-overflow-in-extended-file.html	Exploit
http://osvdb.org/41064
http://osvdb.org/41065

Configurations

Configuration 1 (hide)

cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*

History

21 Nov 2024, 00:37

Type	Values Removed	Values Added
References	~~() http://lostmon.blogspot.com/2007/06/buffer-overflow-in-extended-file.html - Exploit~~	() http://lostmon.blogspot.com/2007/06/buffer-overflow-in-extended-file.html - Exploit
References	~~() http://osvdb.org/41064 -~~	() http://osvdb.org/41064 -
References	~~() http://osvdb.org/41065 -~~	() http://osvdb.org/41065 -

Information

Published : 2007-10-01 05:17

Updated : 2024-11-21 00:37

NVD link : CVE-2007-5145

Mitre link : CVE-2007-5145

CVE.ORG link : CVE-2007-5145

JSON object : View

Products Affected

microsoft

windows_xp

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2007-5145", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-10-01T05:17:00.000", "references": [{"url": "http://lostmon.blogspot.com/2007/06/buffer-overflow-in-extended-file.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/41064", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/41065", "source": "cve@mitre.org"}, {"url": "http://lostmon.blogspot.com/2007/06/buffer-overflow-in-extended-file.html", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/41064", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/41065", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in system DLL files in Microsoft Windows XP, as used by Microsoft Windows Explorer (explorer.exe) 6.00.2900.2180, Don Ho Notepad++, unspecified Adobe Macromedia applications, and other programs, allow user-assisted remote attackers to cause a denial of service (application crash) via long strings in the (1) author, (2) title, (3) subject, and (4) comment Properties fields of a file, possibly involving improper handling of extended file attributes by the (a) NtQueryInformationFile, (b) NtQueryDirectoryFile, (c) NtSetInformationFile, (d) FileAllInformation, (e) FileNameInformation, and other FILE_INFORMATION_CLASS functions in ntdll.dll and the (f) GetFileAttributesExW and (g) GetFileAttributesW functions in kernel32.dll, a related issue to CVE-2007-1347."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer en ficheros DLL del sistema de Microsoft Windows XP, tal y como se usan en Microsoft Windows Explorer (explorer.exe) 6.00.2900.2180, Don Ho Notepad++, aplicaciones Adobe Macromedia no especificadas, y otros programas, permiten a atacantes remotos con la complicidad del usuario provocar una denegaci\u00f3n de servicio (ca\u00edda de aplicaci\u00f3n) mediante cadenas largas en los campos de Propiedaes de un fichero (1) author, (2) title, (3) subject, and (4) comment ; posiblemente involucrando manjeo inapropiado de atributos de fichero extendidos por (a) NtQueryInformationFile, (b) NtQueryDirectoryFile, (c) NtSetInformationFile, (d) FileAllInformation, (e) FileNameInformation, y otras funciones FILE_INFORMATION_CLASS functions de ntdll.dll y las fucniones (f) GetFileAttributesExW y (g) GetFileAttributesW de kernel32.dll, vulnerabilidad diferente de CVE-2007-1347."}], "lastModified": "2024-11-21T00:37:14.443", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B47EBFCC-1828-45AB-BC6D-FB980929A81A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}