CVE-2007-4447 - CVE House
Back to Database
Status published High CVE-2007-4447

Multiple buffer overflows in the client in Toribash 2.71 and...

Vulnerability Description

Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary code via a long game command in a replay (.rpl) file and (2) cause a denial of service (application crash) via a long SAY command that omits a required LF character; and allow remote Toribash servers to execute arbitrary code via (3) a long game command and (4) a long SAY command that omits a required LF character.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-4447

Credits & Attribution

No credits recorded in the NVD database.

References

More from toribash

View All →
CVE-2007-4452
The client in Toribash 2.71 and earlier allows remote attackers...
Medium 5
CVE-2007-4451
The server in Toribash 2.71 and earlier on Windows allows...
Medium 5
CVE-2007-4450
The server in Toribash 2.71 and earlier does not properly...
Medium 5
CVE-2007-4449
The client in Toribash 2.71 and earlier allows remote attackers...
Medium 5
CVE-2007-4448
The server in Toribash 2.71 and earlier does not properly...
Medium 5

Affected Vendor

Affected Software

toribash
Vulnerable Versions:
0

Timeline

Official Publish: August 21st, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.