CVE-2007-4642in critical feed1 exploit
Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote attackers to execute arbitrary code via a long chat…
Published 19 y ago · modified 4 mo ago · JSON
Summary
Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote attackers to execute arbitrary code via a long chat (PKT_CHAT) message that is not properly handled by the (1) D_NetPlayerEvent function in d_net.c or the (2) Msg_Write function in net_msg.c, or (3) many commands that are not properly handled by the NetSv_ReadCommands function in d_netsv.c; or (4) cause a denial of service (daemon crash) via a chat (PKT_CHAT) message without a final '\0' character.
Exploit prediction (EPSS)
16.31% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.
Exploits and detections
- EDB-30543 Doomsday Engine 1.8.6/1.9 - Multiple Remote Vulnerabilities · remote · 2007-08-29
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
- securityreason.com /securityalert/3084 · third-party-advisory, x_refsource_SREASON, x_transferred
- secunia.com /advisories/28821 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/36332 · vdb-entry, x_refsource_XF, x_transferred
- aluigi.altervista.org /adv/dumsdei-adv.txt · x_refsource_MISC, x_transferred
- bugs.gentoo.org /show_bug.cgi?id=190835 · x_refsource_CONFIRM, x_transferred
- secunia.com /advisories/26524 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- securityfocus.com /archive/1/478077/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/36333 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/25483 · vdb-entry, x_refsource_BID, x_transferred
- security.gentoo.org /glsa/glsa-200802-02.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/36334 · vdb-entry, x_refsource_XF, x_transferred
- aluigi.org /poc/dumsdei.zip · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2007-4642
- NVD: CVE-2007-4642
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.