CVE-2007-1344: Buffer Overflow
Published Mar 8, 2007
·Updated
Multiple buffer overflows in src/ezstream.c in Ezstream before 0.3.0 allow remote attackers to execute arbitrary code via a crafted XML configuration file processed by the (1) urlParse function, which causes a stack-based overflow and the (2) ReplaceString function, which causes a heap-based overflow. NOTE: some of these details are obtained from third party information.
Affected Software
6 affected components
xiph Icecast Ezstream<=0.1.0
xiph Icecast Ezstream<=0.1.1
xiph Icecast Ezstream<=0.1.2
xiph Icecast Ezstream<=0.1.3
xiph Icecast Ezstream<=0.2.0
xiph Icecast Ezstream<=0.2.1
Remediation
Patch Available
Event History
Mar 8, 2007
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1344?
CVE-2007-1344 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2007-1344?
To fix CVE-2007-1344, upgrade Ezstream to version 0.3.0 or later.
3
What types of buffer overflows are associated with CVE-2007-1344?
CVE-2007-1344 involves both stack-based and heap-based buffer overflows.
4
Which versions of Ezstream are affected by CVE-2007-1344?
CVE-2007-1344 affects Ezstream versions prior to 0.3.0.
5
Can CVE-2007-1344 be exploited remotely?
Yes, CVE-2007-1344 can be exploited remotely through crafted XML configuration files.