« Volver al listado

CVE-2007-0315

Estado: ModificadaAlta (9.3)—

Multiple buffer overflows in FileZilla before 2.2.30a allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors related to (1) Options.cpp when storing settings in the registry, and (2) the transfer queue (QueueCtrl.cpp). NOTE: some of these details are obtained from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Filezilla — Filezilla

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-0315",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-01-18T00:28:00.000",
  "references": [
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=475423&group_id=21558",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/22057",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0183",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31500",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=475423&group_id=21558",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/22057",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0183",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31500",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple buffer overflows in FileZilla before 2.2.30a allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors related to (1) Options.cpp when storing settings in the registry, and (2) the transfer queue (QueueCtrl.cpp).  NOTE: some of these details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "Múltiples desbordamientos de búfer en FileZilla versiones anteriores a 2.2.30a, permiten a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de vectores no especificados relacionados con (1) el archivo Options.cpp cuando se almacenan configuraciones en el registro, y (2) la cola de transferencia (QueueCtrl.cpp). NOTA: algunos de estos detalles se obtienen de información de terceros."
    }
  ],
  "lastModified": "2026-06-16T22:35:20.500",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C67196B6-10FD-4A50-93FD-804704AE9980",
              "versionEndIncluding": "2.2.30"
            },
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:0.9.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7E2B2E7B-7382-435A-927A-C741807D26F9"
            },
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:0.9.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CAFFB48F-EA66-41BE-BC27-20246EA1F620"
            },
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:0.9.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58C8F086-2040-4866-9010-990D2D1548CA"
            },
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:2.2.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3AC390AF-5CEB-4201-B719-3A1132CBC05C"
            },
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:2.2.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CAE0841F-4D10-4E4B-A9E5-3A457C42EFDF"
            },
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:2.2.23:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1593910D-65A2-4909-83F9-696E3E48BB81"
            },
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:2.2.24:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD809934-E3DA-44FC-B927-11481379801A"
            },
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:2.2.25:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A62BFFF0-5048-4010-8F18-FB426F1BAAB3"
            },
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:2.2.26:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E54A9FC-D5DB-423E-9512-EDF9529FD8A9"
            },
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:2.2.26a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5D3C4C2-AEB1-4D83-AE6F-D8F4DE2CD231"
            },
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:2.2.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF8D7E03-48F0-4CF5-AB02-EB57F978B01B"
            },
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:2.2.28:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE9CCE2B-A7F8-460D-8415-BBE21AF1DF75"
            },
            {
              "criteria": "cpe:2.3:a:filezilla:filezilla:2.2.29:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6ECEB364-2691-4189-8504-A70009830759"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "evaluatorSolution": "Failed exploit attempts may result in a application level denial-of-service condition."
}