« Volver al listado

CVE-2007-3659

Estado: ModificadaMedia (4.6)—

Desbordamiento de búfer en la función doBrowserAction de FreeWRL 1.19.3 permite a usuarios locales ejecutar código de su elección mediante una variable de entorno BROWSER manipulada. NOTA: no está claro si este problema cruza fronteras de privilegios.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Freewrl — Freewrl

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-3659",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-07-10T19:30:00.000",
  "references": [
    {
      "url": "http://osvdb.org/45807",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.eleytt.com/advisories/eleytt_FREEWRL.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/473187",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/45807",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.eleytt.com/advisories/eleytt_FREEWRL.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/473187",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the doBrowserAction function in FreeWRL 1.19.3 allows local users to execute arbitrary code via a crafted BROWSER environment variable.  NOTE: it is not clear whether this issue crosses privilege boundaries."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en la función doBrowserAction de FreeWRL 1.19.3 permite a usuarios locales ejecutar código de su elección mediante una variable de entorno BROWSER manipulada. NOTA: no está claro si este problema cruza fronteras de privilegios."
    }
  ],
  "lastModified": "2026-06-16T22:42:28.573",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:freewrl:freewrl:1.19.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F17A5A2E-BE66-493A-9CEC-DBAD54340148"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}