CVE-2007-2500 - CVE House
Back to Database
Status published Critical CVE-2007-2500

server/parser/sprite_definition.cpp in GNU Gnash (aka GNU Flash Player) 0.7.2 allows...

Vulnerability Description

server/parser/sprite_definition.cpp in GNU Gnash (aka GNU Flash Player) 0.7.2 allows remote attackers to execute arbitrary code via a large number of SHOWFRAME elements within a DEFINESPRITE element, which triggers memory corruption and enables the attacker to call free with an arbitrary address, probably resultant from a buffer overflow.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-2500

Credits & Attribution

No credits recorded in the NVD database.

References

More from gnu

View All →
CVE-2024-10524
GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs
Medium 6.5
CVE-2022-48339
An issue was discovered in GNU Emacs through 28.2. htmlfontify.el...
Unknown 0
CVE-2022-48338
An issue was discovered in GNU Emacs through 28.2. In...
Unknown 0
CVE-2022-48337
GNU Emacs through 28.2 allows attackers to execute commands via...
Unknown 0
CVE-2022-48303
GNU Tar through 1.34 has a one-byte out-of-bounds read that...
Unknown 0

Affected Vendor

Affected Software

flash player
Vulnerable Versions:
0

Timeline

Official Publish: May 4th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.