Vulnerability Details CVE-2007-0803
Multiple buffer overflows in STLport before 5.0.3 allow remote attackers to execute arbitrary code via unspecified vectors relating to (1) "print floats" and (2) a missing null termination in the "rope constructor."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.058
EPSS Ranking 92.6%
CVSS Severity
CVSS v2 Score 7.5
References
- http://osvdb.org/33106
- http://osvdb.org/33107
- http://secunia.com/advisories/24024
- http://secunia.com/advisories/24428
- http://security.gentoo.org/glsa/glsa-200703-07.xml
- http://sourceforge.net/project/shownotes.php?release_id=483468
- http://www.securityfocus.com/bid/22423
- http://www.vupen.com/english/advisories/2007/0498
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32242
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32244
- http://osvdb.org/33106
- http://osvdb.org/33107
- http://secunia.com/advisories/24024
- http://secunia.com/advisories/24428
- http://security.gentoo.org/glsa/glsa-200703-07.xml
- http://sourceforge.net/project/shownotes.php?release_id=483468
- http://www.securityfocus.com/bid/22423
- http://www.vupen.com/english/advisories/2007/0498
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32242
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32244
Products affected by CVE-2007-0803
-
cpe:2.3:a:stlport_project:stlport:5.0.0
-
cpe:2.3:a:stlport_project:stlport:5.0.1
-
cpe:2.3:a:stlport_project:stlport:5.0.2