CVE-2007-4547
- State
- Published
- Severity
- Not scored
- Published
- Aug 27, 2007
- Updated
- Aug 7, 2024
- Reserved
- Aug 27, 2007
Description
Unreal Commander 0.92 build 565 and 573 writes portions of heap memory into local files when extracting from an archive with malformed size information in a file header, which might allow user-assisted attackers to obtain sensitive information (memory contents) by reading the extracted files. NOTE: this issue is only a vulnerability if Unreal is run with privileges, or if the extracted files are made accessible to other users.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 3060third-party-advisory
- 20070823 X-Diesel Unreal Commander v0.92 (build 573) multiple vulnerabilitiesmailing-list
- 25419vdb-entry
- 45832vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.