ByteOS Network

NVD Vulnerability Details :

CVE-2007-2352

Modified

Source-cve@mitre.org

Published At-30 Apr, 2007 | 22:19

Updated At-23 Apr, 2026 | 00:35

Multiple format string vulnerabilities in AFFLIB 2.2.6 allow remote attackers to execute arbitrary code via certain command line parameters, which are used in (1) warn and (2) err calls, possibly involving (a) lib/s3.cpp, (b) tools/afconvert.cpp, (c) tools/afcopy.cpp, (d) tools/afinfo.cpp, (e) aimage/imager.cpp, and (f) tools/afxml.cpp. NOTE: this identifier is intended to address the vectors that were not fixed in CVE-2007-2054, but the unfixed vectors were not explicitly listed.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

afflib>>afflib>>Versions up to 2.2.6(inclusive)

cpe:2.3:a:afflib:afflib:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

Evaluator Solution

The vendor has addressed this issue with the following product update: http://www.afflib.org/downloads/

References

Hyperlink	Source	Resource
http://securityreason.com/securityalert/2657	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/467040/100/0/threaded	cve@mitre.org	N/A
http://www.vsecurity.com/bulletins/advisories/2007/afflib-fmtstr.txt	cve@mitre.org	Patch
http://securityreason.com/securityalert/2657	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/467040/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vsecurity.com/bulletins/advisories/2007/afflib-fmtstr.txt	af854a3a-2127-422b-91ae-364da2661108	Patch