CVE-2007-6537

WinUAE 1.4.4 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in the zfile_gunzip function in zfile.c in WinUAE 1.4.4 and earlier allows user-assisted remote attackers to execute arbitrary code via a long filename in a gzipped archive, such as a (1) gz, (2) adz, (3) roz, or (4) hdz archive in a compressed floppy disk image.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Luigi Auriemma · cdosmultiple

https://www.exploit-db.com/exploits/30922

View Code ZIP pw:eip

References (9)

[Third Party Advisory] http://aluigi.altervista.org/adv/winuaebof-adv.txt

[Various Sources] http://aluigi.org/poc/winuaebof.zip

[Third Party Advisory, VDB Entry] http://osvdb.org/39902

[Exploit, Patch] http://www.securityfocus.com/bid/26979

[Various Sources] http://www.winuae.net/frames/mainframe.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/485446/100/0/threaded

[Third Party Advisory] http://secunia.com/advisories/28208

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/4306/references

[Third Party Advisory] http://securityreason.com/securityalert/3487

Scores

EPSS 0.2053

EPSS Percentile 95.6%

Details

CWE

CWE-119

Status published

Products (1)

winuae/winuae 1.4.4

Published Dec 27, 2007

Tracked Since Feb 18, 2026