{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-09-05T00:00:00", "descriptions": [{"lang": "en", "value": "Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "26624", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/26624"}, {"name": "JVN#62868899", "tags": ["third-party-advisory", "x_refsource_JVN"], "url": "http://jvn.jp/jp/JVN%2362868899/index.html"}, {"name": "25545", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/25545"}, {"tags": ["x_refsource_MISC"], "url": "http://sourceforge.net/project/shownotes.php?release_id=535160&group_id=14481"}, {"name": "40482", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/40482"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://akky.cjb.net/security/7-zip3.txt"}, {"name": "ADV-2007-3086", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/3086"}, {"name": "akkywarehouse-zip-bo(36459)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36459"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-4725", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "26624", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/26624"}, {"name": "JVN#62868899", "refsource": "JVN", "url": "http://jvn.jp/jp/JVN%2362868899/index.html"}, {"name": "25545", "refsource": "BID", "url": "http://www.securityfocus.com/bid/25545"}, {"name": "http://sourceforge.net/project/shownotes.php?release_id=535160&group_id=14481", "refsource": "MISC", "url": "http://sourceforge.net/project/shownotes.php?release_id=535160&group_id=14481"}, {"name": "40482", "refsource": "OSVDB", "url": "http://osvdb.org/40482"}, {"name": "http://akky.cjb.net/security/7-zip3.txt", "refsource": "CONFIRM", "url": "http://akky.cjb.net/security/7-zip3.txt"}, {"name": "ADV-2007-3086", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/3086"}, {"name": "akkywarehouse-zip-bo(36459)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36459"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-4725", "datePublished": "2007-09-05T19:00:00", "dateReserved": "2007-09-05T00:00:00", "dateUpdated": "2017-07-28T12:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:7-zip:7-zip:*:*:*:*:*:*:*:*", "matchCriteriaId": "E4781BF9-2A59-412C-BF69-E707EDD06383", "versionEndIncluding": "4.42", "vulnerable": true}, {"criteria": "cpe:2.3:a:7-zip:7-zip:4.43:beta:*:*:*:*:*:*", "matchCriteriaId": "3071CC75-581A-4A34-A354-4ECA2C2ADD55", "vulnerable": true}, {"criteria": "cpe:2.3:a:7-zip:7-zip:4.44:beta:*:*:*:*:*:*", "matchCriteriaId": "AF85486D-6F16-4BD7-A318-8E80EF3E1E93", "vulnerable": true}, {"criteria": "cpe:2.3:a:7-zip:7-zip:4.45:beta:*:*:*:*:*:*", "matchCriteriaId": "ED9B7457-2349-4FF5-BE09-AB5E4E618B96", "vulnerable": true}, {"criteria": "cpe:2.3:a:7-zip:7-zip:4.46:beta:*:*:*:*:*:*", "matchCriteriaId": "5B2E0E16-AC01-4D34-A145-1510DA0DE4F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:7-zip:7-zip:4.47:beta:*:*:*:*:*:*", "matchCriteriaId": "53C18BF5-D237-4BBE-B008-84C2CF81FBAF", "vulnerable": true}, {"criteria": "cpe:2.3:a:7-zip:7-zip:4.48:beta:*:*:*:*:*:*", "matchCriteriaId": "0AC41507-1413-4224-8DCB-B96469087564", "vulnerable": true}, {"criteria": "cpe:2.3:a:7-zip:7-zip:4.49:beta:*:*:*:*:*:*", "matchCriteriaId": "6BB31556-1D8C-4C98-9013-605DE461FB1F", "vulnerable": true}, {"criteria": "cpe:2.3:a:7-zip:7-zip:4.50:beta:*:*:*:*:*:*", "matchCriteriaId": "0F0851E8-0C8A-48C6-B519-1A2CFD500B8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:7-zip:7-zip:4.51:beta:*:*:*:*:*:*", "matchCriteriaId": "56A6D1EC-4605-43F0-9290-380168627D5F", "vulnerable": true}, {"criteria": "cpe:2.3:a:7-zip:7-zip:4.52:beta:*:*:*:*:*:*", "matchCriteriaId": "56A4F4D2-C4E7-4240-8938-C695586CFE93", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow."}, {"lang": "es", "value": "Vulnerabilidad de consumo de pila en AkkyWareHOUSE 7-zip32.dll anterior a 4.42.00.04, como el derivado de Igor Pavlov 7-Zip anterior a 4.53 beta, permite a atacantes remotos con la complicidad del usuario ejecutar c\u00f3digo de su elecci\u00f3n mediante un nombre de fichero largo en un archivo, que acaba en un desbordamiento de b\u00fafer basado en pila."}], "id": "CVE-2007-4725", "lastModified": "2020-09-17T13:38:09.700", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2007-09-05T19:17:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://akky.cjb.net/security/7-zip3.txt"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://jvn.jp/jp/JVN%2362868899/index.html"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://osvdb.org/40482"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/26624"}, {"source": "cve@mitre.org", "tags": ["Product", "Third Party Advisory"], "url": "http://sourceforge.net/project/shownotes.php?release_id=535160&group_id=14481"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/25545"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://www.vupen.com/english/advisories/2007/3086"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36459"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}