« Volver al listado

CVE-2007-4963

Estado: ModificadaAlta (9.3)—

Visual truncation vulnerability in WinImage 8.10 and earlier allows remote attackers to spoof a destination filename via a long sequence of space characters in a filename within a (1) .IMG or (2) .ISO file. NOTE: this can be leveraged with a separate directory traversal vulnerability to trick a careful user into overwriting arbitrary files.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Winimage — Winimage

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-4963",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-09-18T22:17:00.000",
  "references": [
    {
      "url": "http://osvdb.org/45948",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/3140",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/479695/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/479872/100/100/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/45948",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/3140",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/479695/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/479872/100/100/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Visual truncation vulnerability in WinImage 8.10 and earlier allows remote attackers to spoof a destination filename via a long sequence of space characters in a filename within a (1) .IMG or (2) .ISO file. NOTE: this can be leveraged with a separate directory traversal vulnerability to trick a careful user into overwriting arbitrary files."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de truncado visual en WinImage 8.10 y anteriores permite a atacantes remotos falsear un nombre de archivo de destino mediante una secuencia larga de caracteres espacio en un nombre de archivo dentro de un fichero (1) .IMG o (2) .ISO. NOTA: esto puede ser aprovechado con una vulnerabilidad independiente de salto de directorio para engañar a un usuario cuidadoso y que sobrescriba archivos a elección del atacante."
    }
  ],
  "lastModified": "2026-06-16T22:45:10.540",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:winimage:winimage:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "98C56540-83AE-47A4-B375-69972B19BFF7"
            },
            {
              "criteria": "cpe:2.3:a:winimage:winimage:8.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D818847-9AE7-40DC-AE0D-1DAD5EF81435"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}