CVE-2006-2007

Published: Apr 25, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code via long strings to certain commands sent to the file transfer port.

Affected (2)

Products: Winny: Winny

Winny

1 product

Winny

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Winny Winny	Version 2.0b5.7
Winny Winny	Version 2.0b7.1

References (16)

http://jvn.jp/jp/JVN%2374294680/index.html

Source: cve@mitre.org

http://secunia.com/advisories/19795

Source: cve@mitre.org

Vendor Advisory

http://www.eeye.com/html/research/advisories/AD20060421.html

Source: cve@mitre.org

Vendor Advisory

http://www.kb.cert.org/vuls/id/167033

Source: cve@mitre.org

US Government Resource

http://www.osvdb.org/24883

Source: cve@mitre.org

http://www.securityfocus.com/bid/17666

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1486

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25986

Source: cve@mitre.org

http://jvn.jp/jp/JVN%2374294680/index.html