CVE-2007-2514
Stack-based buffer overflow in XferWan.exe as used in multiple products including (1) Symantec Discovery 6.5, (2) Numara Asset Manager 8.0, and (3) Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.74%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Stack-based buffer overflow in XferWan.exe as used in multiple products including (1) Symantec Discovery 6.5, (2) Numara Asset Manager 8.0, and (3) Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation duplicate of CVE-2007-1173.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 4.74% probability · 91th percentile
- CISA KEV
- Not listed
- Affected
- centennial/discovery · numara/asset manager · symantec/discovery
- Source
- cve@mitre.org
References
- http://dvlabs.tippingpoint.com/advisory/TPTI-07-10Patch
- http://osvdb.org/42059
- http://securityreason.com/securityalert/2785
- http://www.securityfocus.com/archive/1/470563/100/0/threaded
- http://www.securityfocus.com/bid/24317Patch
- http://www.securitytracker.com/id?1018191
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34723
- http://dvlabs.tippingpoint.com/advisory/TPTI-07-10Patch
- http://osvdb.org/42059
- http://securityreason.com/securityalert/2785
- http://www.securityfocus.com/archive/1/470563/100/0/threaded
- http://www.securityfocus.com/bid/24317Patch
- http://www.securitytracker.com/id?1018191
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34723
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.