Unscored CVE-2007-2489 EUVD-2007-2482GHSA-9v54-3hqm-3pfm

Heap-based buffer overflow in LiveData Protocol Server 5.00.045, and other versions before update 500062 (5.00.062), allows remote attacker…

Published May 3, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Heap-based buffer overflow in LiveData Protocol Server 5.00.045, and other versions before update 500062 (5.00.062), allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted request for a WSDL file that causes a negative length to be used in a strncpy call.

References

35529 vdb-entry
23773 vdb-entry
ADV-2007-1633 vdb-entry
20070502 LiveData Protocol Server Heap Overflow Vulnerability third-party-advisory
VU#213516 third-party-advisory
livedata-wsdl-bo(34031) vdb-entry
1017998 vdb-entry
25076 third-party-advisory