CVE-2007-3314 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 43.4% (pctl 99)
Patch early
A public exploit exists.
Description
Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portable Executable Viewer 1.00 (English Trial), allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 43.41% — more likely to be exploited than 99% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-06-21 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| altap | portable executable viewer |
| altap | servant salamander |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Altap Salamander 2.5 PE Viewer - Local Buffer Overflow (Metasploit) | 2010-12-16 |
References
- http://osvdb.org/37579
- http://secunia.com/advisories/25732
- http://vuln.sg/salamander25-en.html
- http://www.securityfocus.com/bid/24557
- http://www.vupen.com/english/advisories/2007/2268
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34938
- http://osvdb.org/37579
- http://secunia.com/advisories/25732
- http://vuln.sg/salamander25-en.html
- http://www.securityfocus.com/bid/24557
- http://www.vupen.com/english/advisories/2007/2268
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34938
→ the Explorer · watch your stack · NVD