critical10.0Public exploit code
CVE-2007-1568
Stack-based buffer overflow in DaanSystems NewsReactor 20070220.21 allows remote attackers to execute arbitrary code via a yEnc (yEncode) encoded article with …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NewsReactor 20070220 - Article Grabbing Remote Buffer Overflow (2)2007-03-12 · remote · windows · Verified
- NewsReactor 20070220 - Article Grabbing Remote Buffer Overflow (1)2007-03-12 · remote · windows · Verified
Impact
Stack-based buffer overflow in DaanSystems NewsReactor 20070220.21 allows remote attackers to execute arbitrary code via a yEnc (yEncode) encoded article with a long filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Daansystems | Newsreactor | Version 2007-02-21 |
References
- NVD record
- CVE.org record
- http://osvdb.org/34035
- http://secunia.com/advisories/24487
- http://www.vupen.com/english/advisories/2007/0934
- https://www.exploit-db.com/exploits/3462
- https://www.exploit-db.com/exploits/3463
- http://osvdb.org/34035
- http://secunia.com/advisories/24487
- http://www.vupen.com/english/advisories/2007/0934
- https://www.exploit-db.com/exploits/3462
- https://www.exploit-db.com/exploits/3463