« Volver al listado

CVE-2007-6060

Estado: ModificadaAlta (9.3)—

AhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a filename string at a location indicated by the "Filename length" field in a ZIP header, which allows remote attackers to cause a denial of service (machine crash) and possibly execute arbitrary code via a ZIP file in which this field's value is larger than the actual number of bytes in the filename.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Ahnlab — V3 Internet Security

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-6060",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-11-20T20:46:00.000",
  "references": [
    {
      "url": "http://global.ahnlab.com/global/notice_view.ESD?fmethod=view&press_seq=803&printNum=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/42352",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/27757",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/3382",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secway.org/advisory/AD20071116.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/483799/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/26473",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1018977",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/3983",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38514",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://global.ahnlab.com/global/notice_view.ESD?fmethod=view&press_seq=803&printNum=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/42352",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/27757",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/3382",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secway.org/advisory/AD20071116.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/483799/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/26473",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1018977",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/3983",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38514",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "AhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a filename string at a location indicated by the \"Filename length\" field in a ZIP header, which allows remote attackers to cause a denial of service (machine crash) and possibly execute arbitrary code via a ZIP file in which this field's value is larger than the actual number of bytes in the filename."
    },
    {
      "lang": "es",
      "value": "AhnLab Antivirus 3 Internet Security 2008 Platinum añade datos en una cadena de nombre de archivo en una localización indicada por el campo \"Filename length\" en un cabecera ZIP, lo cual permite a atacantes remotos provocar denegación de servicio (caida de máquina) y posiblemente ejecutar código de su elección a través del un archivo ZIP en el cual este valor de campo es mayor que el actual número de bytes en el nombre de archivo."
    }
  ],
  "lastModified": "2026-06-16T22:47:20.803",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ahnlab:v3_internet_security:2008:*:platinum:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "380B5EAC-334D-4DC8-8787-BD8CD8DE81EB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}