Description

The ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an arbitrary address, which might allow context-dependent attackers to execute arbitrary code.

Remediation

References

CVE-2007-1379

Related Vulnerabilities

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7897)

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-7196)

WordPress Plugin WordPress Filter Gallery Cross-Site Scripting (0.1.5)

WordPress Plugin ALD-Dropshipping and Fulfillment for AliExpress and WooCommerce Multiple Vulnerabilities (1.0.21)

WordPress Plugin Polylang Cross-Site Scripting (1.5.1)

Severity

Medium

Classification

CVE-2007-1379

Tags

Missing Update Known Vulnerabilities