CVE-2007-1035 | BDVDB-2026-22370 Detail

Description#

Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/32542
http://www.vupen.com/english/advisories/2007/0635
http://www.securityfocus.com/bid/22587
http://drupal.org/node/119385
http://blamcast.net/articles/highly-critical-security-flaws-in-drupal-audio-module
http://osvdb.org/35161

Exploit#

No public exploit known

History#

Version 12007-02-21Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.