CVE-2007-4725 (GCVE-0-2007-4725)
Vulnerability from cvelistv5 – Published: 2007-09-05 19:00 – Updated: 2024-08-07 15:08
VLAI?
Summary
Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T15:08:32.898Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "26624",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/26624"
},
{
"name": "JVN#62868899",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "http://jvn.jp/jp/JVN%2362868899/index.html"
},
{
"name": "25545",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/25545"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=535160\u0026group_id=14481"
},
{
"name": "40482",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/40482"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://akky.cjb.net/security/7-zip3.txt"
},
{
"name": "ADV-2007-3086",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/3086"
},
{
"name": "akkywarehouse-zip-bo(36459)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36459"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-09-05T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-28T12:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "26624",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/26624"
},
{
"name": "JVN#62868899",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "http://jvn.jp/jp/JVN%2362868899/index.html"
},
{
"name": "25545",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/25545"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=535160\u0026group_id=14481"
},
{
"name": "40482",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/40482"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://akky.cjb.net/security/7-zip3.txt"
},
{
"name": "ADV-2007-3086",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/3086"
},
{
"name": "akkywarehouse-zip-bo(36459)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36459"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-4725",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "26624",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/26624"
},
{
"name": "JVN#62868899",
"refsource": "JVN",
"url": "http://jvn.jp/jp/JVN%2362868899/index.html"
},
{
"name": "25545",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/25545"
},
{
"name": "http://sourceforge.net/project/shownotes.php?release_id=535160\u0026group_id=14481",
"refsource": "MISC",
"url": "http://sourceforge.net/project/shownotes.php?release_id=535160\u0026group_id=14481"
},
{
"name": "40482",
"refsource": "OSVDB",
"url": "http://osvdb.org/40482"
},
{
"name": "http://akky.cjb.net/security/7-zip3.txt",
"refsource": "CONFIRM",
"url": "http://akky.cjb.net/security/7-zip3.txt"
},
{
"name": "ADV-2007-3086",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/3086"
},
{
"name": "akkywarehouse-zip-bo(36459)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36459"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-4725",
"datePublished": "2007-09-05T19:00:00",
"dateReserved": "2007-09-05T00:00:00",
"dateUpdated": "2024-08-07T15:08:32.898Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:7-zip:7-zip:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"4.42\", \"matchCriteriaId\": \"E4781BF9-2A59-412C-BF69-E707EDD06383\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:7-zip:7-zip:4.43:beta:*:*:*:*:*:*\", \"matchCriteriaId\": \"3071CC75-581A-4A34-A354-4ECA2C2ADD55\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:7-zip:7-zip:4.44:beta:*:*:*:*:*:*\", \"matchCriteriaId\": \"AF85486D-6F16-4BD7-A318-8E80EF3E1E93\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:7-zip:7-zip:4.45:beta:*:*:*:*:*:*\", \"matchCriteriaId\": \"ED9B7457-2349-4FF5-BE09-AB5E4E618B96\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:7-zip:7-zip:4.46:beta:*:*:*:*:*:*\", \"matchCriteriaId\": \"5B2E0E16-AC01-4D34-A145-1510DA0DE4F9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:7-zip:7-zip:4.47:beta:*:*:*:*:*:*\", \"matchCriteriaId\": \"53C18BF5-D237-4BBE-B008-84C2CF81FBAF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:7-zip:7-zip:4.48:beta:*:*:*:*:*:*\", \"matchCriteriaId\": \"0AC41507-1413-4224-8DCB-B96469087564\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:7-zip:7-zip:4.49:beta:*:*:*:*:*:*\", \"matchCriteriaId\": \"6BB31556-1D8C-4C98-9013-605DE461FB1F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:7-zip:7-zip:4.50:beta:*:*:*:*:*:*\", \"matchCriteriaId\": \"0F0851E8-0C8A-48C6-B519-1A2CFD500B8A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:7-zip:7-zip:4.51:beta:*:*:*:*:*:*\", \"matchCriteriaId\": \"56A6D1EC-4605-43F0-9290-380168627D5F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:7-zip:7-zip:4.52:beta:*:*:*:*:*:*\", \"matchCriteriaId\": \"56A4F4D2-C4E7-4240-8938-C695586CFE93\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow.\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de consumo de pila en AkkyWareHOUSE 7-zip32.dll anterior a 4.42.00.04, como el derivado de Igor Pavlov 7-Zip anterior a 4.53 beta, permite a atacantes remotos con la complicidad del usuario ejecutar c\\u00f3digo de su elecci\\u00f3n mediante un nombre de fichero largo en un archivo, que acaba en un desbordamiento de b\\u00fafer basado en pila.\"}]",
"id": "CVE-2007-4725",
"lastModified": "2024-11-21T00:36:18.373",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:P/A:P\", \"baseScore\": 6.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2007-09-05T19:17:00.000",
"references": "[{\"url\": \"http://akky.cjb.net/security/7-zip3.txt\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://jvn.jp/jp/JVN%2362868899/index.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://osvdb.org/40482\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/26624\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://sourceforge.net/project/shownotes.php?release_id=535160\u0026group_id=14481\", \"source\": \"cve@mitre.org\", \"tags\": [\"Product\", \"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/25545\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2007/3086\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/36459\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://akky.cjb.net/security/7-zip3.txt\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://jvn.jp/jp/JVN%2362868899/index.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://osvdb.org/40482\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/26624\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://sourceforge.net/project/shownotes.php?release_id=535160\u0026group_id=14481\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Product\", \"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/25545\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2007/3086\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/36459\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-400\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2007-4725\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2007-09-05T19:17:00.000\",\"lastModified\":\"2025-04-09T00:30:58.490\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de consumo de pila en AkkyWareHOUSE 7-zip32.dll anterior a 4.42.00.04, como el derivado de Igor Pavlov 7-Zip anterior a 4.53 beta, permite a atacantes remotos con la complicidad del usuario ejecutar c\u00f3digo de su elecci\u00f3n mediante un nombre de fichero largo en un archivo, que acaba en un desbordamiento de b\u00fafer basado en pila.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:7-zip:7-zip:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"4.42\",\"matchCriteriaId\":\"E4781BF9-2A59-412C-BF69-E707EDD06383\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:7-zip:7-zip:4.43:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"3071CC75-581A-4A34-A354-4ECA2C2ADD55\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:7-zip:7-zip:4.44:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF85486D-6F16-4BD7-A318-8E80EF3E1E93\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:7-zip:7-zip:4.45:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED9B7457-2349-4FF5-BE09-AB5E4E618B96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:7-zip:7-zip:4.46:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B2E0E16-AC01-4D34-A145-1510DA0DE4F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:7-zip:7-zip:4.47:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"53C18BF5-D237-4BBE-B008-84C2CF81FBAF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:7-zip:7-zip:4.48:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"0AC41507-1413-4224-8DCB-B96469087564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:7-zip:7-zip:4.49:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"6BB31556-1D8C-4C98-9013-605DE461FB1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:7-zip:7-zip:4.50:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F0851E8-0C8A-48C6-B519-1A2CFD500B8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:7-zip:7-zip:4.51:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"56A6D1EC-4605-43F0-9290-380168627D5F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:7-zip:7-zip:4.52:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"56A4F4D2-C4E7-4240-8938-C695586CFE93\"}]}]}],\"references\":[{\"url\":\"http://akky.cjb.net/security/7-zip3.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://jvn.jp/jp/JVN%2362868899/index.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://osvdb.org/40482\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/26624\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://sourceforge.net/project/shownotes.php?release_id=535160\u0026group_id=14481\",\"source\":\"cve@mitre.org\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/25545\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.vupen.com/english/advisories/2007/3086\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/36459\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://akky.cjb.net/security/7-zip3.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://jvn.jp/jp/JVN%2362868899/index.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://osvdb.org/40482\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/26624\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://sourceforge.net/project/shownotes.php?release_id=535160\u0026group_id=14481\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/25545\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.vupen.com/english/advisories/2007/3086\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/36459\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…