Unscored CVE-2007-5155 EUVD-2007-5136GHSA-8h69-3837-vxvg

IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary co…

Published Oct 1, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which triggers a stack-based buffer overflow.

References

http://vuln.sg/iceows420b-en.html
25844 vdb-entry
41381 vdb-entry
26973 third-party-advisory
iceows-icegui-bo(36843) vdb-entry
ADV-2007-3312 vdb-entry