« Volver al listado

CVE-2007-1655

Estado: ModificadaAlta (10)—

Buffer overflow in the fun_ladd function in funmath.cpp in TinyMUX before 20070126 might allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors related to lists of numbers.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Tinymux — Tinymux

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-1655",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-03-24T00:19:00.000",
  "references": [
    {
      "url": "http://code.google.com/p/tinymux/issues/detail?id=282&can=2&q=",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/34686",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/24733",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/25784",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2007/dsa-1317",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/23292",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.tinymux.org/changes.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/1213",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://code.google.com/p/tinymux/issues/detail?id=282&can=2&q=",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/34686",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/24733",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/25784",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2007/dsa-1317",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/23292",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.tinymux.org/changes.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/1213",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the fun_ladd function in funmath.cpp in TinyMUX before 20070126 might allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors related to lists of numbers."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en la función fun_ladd en funmath.cpp en TinyMUX anterior a 20070126 podría permitir a atacantes remotos provocar denegación de servicio (caida) o posiblemente ejecutar código de su eleccióna través de vectores no especificados relacionados con listas de números."
    }
  ],
  "lastModified": "2026-06-16T22:38:02.287",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tinymux:tinymux:2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8DB909C-BB64-4A9F-B81F-2E7182BD9CB4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}