CVE-2007-6537

Stack-based buffer overflow in the zfile_gunzip function in zfile.c in WinUAE 1.4.4 and earlier allows user-assisted remote attackers to execute arbitrary code via a long filename in a gzipped archive, such as a (1) gz, (2) adz, (3) roz, or (4) hdz archive in a compressed floppy disk image.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

6.34% chance of exploitation in the next 30 days, 93th percentile

Published

2007-12-27

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://aluigi.org/poc/winuaebof.zip

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30922

References

• CVE Record
• NVD entry

Related

• CVE-2007-6533
• CVE-2007-6538
• CVE-2007-6530
• CVE-2007-6539
• CVE-2007-6528
• CVE-2007-6542