Badblue

badblue

Vendor: Badblue • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-2003 1Badblue 1Badblue Apr 23, 2026 Apr 28, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to (1) cause a denial of service via multiple invocations of uninst.exe, and...Show more BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to (1) cause a denial of service via multiple invocations of uninst.exe, and have an unknown impact via (2) badblue.exe and (3) dyndns.exe. NOTE: this can be leveraged for arbitrary remote code execution in conjunction with CVE-2007-6378.Show less
CVE-2007-6379 1Badblue 1Badblue Apr 23, 2026 Dec 15, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message.
CVE-2007-6378 1Badblue 1Badblue Apr 23, 2026 Dec 15, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the filename parameter.
CVE-2007-6377 1Badblue 1Badblue Apr 23, 2026 Dec 15, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long query string.