Bug 1981777 (CVE-2007-1344) - CVE-2007-1344 ezstream: Multiple buffer overflows in src/ezstream.c could allow remote attackers to execute arbitrary code via a crafted XML configuration
Summary: CVE-2007-1344 ezstream: Multiple buffer overflows in src/ezstream.c could all...
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2007-1344
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-07-13 11:41 UTC by Michael Kaplan
Modified: 2021-10-28 05:30 UTC (History)
1 user (show)

Fixed In Version: ezstream 0.3.0
Clone Of:
Environment:
Last Closed: 2021-10-28 05:30:30 UTC
Embargoed:

Attachments (Terms of Use)

Description Michael Kaplan 2021-07-13 11:41:06 UTC 
Multiple buffer overflows in src/ezstream.c in Ezstream before 0.3.0 allow remote attackers to execute arbitrary code via a crafted XML configuration file processed by the (1) urlParse function, which causes a stack-based overflow and the (2) ReplaceString function, which causes a heap-based overflow.

References:

https://exchange.xforce.ibmcloud.com/vulnerabilities/32867
Comment 1 Petr Pisar 2021-07-13 14:53:17 UTC 
All Fedoras deliver 1.0.2. The only EPEL EPEL-7 delivers 0.6.0.

I do not buy the "remote attacker" story because ezstream does not retrieve any configuration files over a network. It's always a local user.
Note You need to log in before you can comment on or make changes to this bug.