CVE-2007-2362

CVE-2007-2362 describes multiple buffer overflow vulnerabilities in MyDNS version 1.1.0. Specifically, a heap-based overflow in update.c can be triggered by a crafted update, and an off-by-one stack-based overflow also in update.c can be triggered by unspecified vectors. These flaws allow authenticated remote attackers to cause a denial of service (daemon crash) and potentially execute arbitrary code. With a CVSS score of 9.0, this vulnerability is considered critical due to its network attack vector, low attack complexity, and complete impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Proof-of-Concept exploit for the heap overflow exists on ExploitDB, indicating public awareness of its exploitability, though there is no evidence of widespread active exploitation or significant community discussion.