Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via (1) a long eighth argument…

Exploit prediction (EPSS)

8.96% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

Exploits and detections

• EDB-4372 GlobalLink 2.7.0.8 - 'glitemflat.dll SetClientInfo()' Heap Overflow · remote · 2007-09-07
• EDB-4366 GlobalLink 2.7.0.8 - 'glItemCom.dll SetInfo()' Heap Overflow · remote · 2007-09-05

CVSS scores

Classification

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

• osvdb.org /45886 · vdb-entry, x_refsource_OSVDB, x_transferred
• securityfocus.com /bid/25586 · vdb-entry, x_refsource_BID, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/36501 · vdb-entry, x_refsource_XF, x_transferred
• exploit-db.com /exploits/4366 · exploit, x_refsource_EXPLOIT-DB, x_transferred
• securityfocus.com /bid/25565 · vdb-entry, x_refsource_BID, x_transferred
• exploit-db.com /exploits/4372 · exploit, x_refsource_EXPLOIT-DB, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/36470 · vdb-entry, x_refsource_XF, x_transferred
• osvdb.org /45887 · vdb-entry, x_refsource_OSVDB, x_transferred

Sources

• CVE List: CVE-2007-4802
• NVD: CVE-2007-4802

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.