$ cve CVE-2007-5256 JSON

CVE-2007-5256 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 7.1% (pctl 94)

Patch early

A public exploit exists.

Description

Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote attackers to execute arbitrary code via a long HELP command on TCP port 3010 to the sysuser::exechelp function in sysuser.cc and (2) remote authenticated users to execute arbitrary code via long commands on TCP port 6809 to the servinterface::sendmulticast function in servinterface.cc, as demonstrated by a PIcallsign command.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	7.08% — more likely to be exploited than 94% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2007-10-06
Last modified	2026-06-16

Affected (1)

Vendor	Product
mcdu	fsd

Public exploits

Source	Title	Date
exploit-db	FSFDT v3.000 d9 - 'HELP' Remote Buffer Overflow	2007-10-04
exploit-db	FSD 2.052/3.000 - 'sysuser.cc sysuser::exechelp' 'HELP' Remote Overflow	2007-10-01
exploit-db	FSD 2.052/3.000 - 'servinterface.cc servinterface::sendmulticast' 'PIcallsign' Command Remote Overflow	2007-10-01

References

→ the Explorer · watch your stack · NVD