CVE-2007-6454 describes a heap-based buffer overflow vulnerability in the handshakeHTTP function of PeerCast 0.1217 and earlier, including SVN 344 and earlier versions. This flaw allows remote attackers to trigger a denial of service and potentially execute arbitrary code by sending a specially crafted, long SOURCE request. The vulnerability carries a critical CVSS score of 10.0, indicating a severe risk with network-based attacks requiring low complexity and no authentication, leading to complete compromise of confidentiality, integrity, and availability. Its EPSS score is 0.38626, and FAUCET rates it at 98/100, highlighting its significant potential impact. While not listed on the CISA KEV catalog or Hot List, exploit code for this vulnerability is publicly available on ExploitDB (EDB-30894). Despite the availability of exploit code, there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 0.1217CPE matchmatch criteria | cpe:2.3:a:peercast:peercast:*:*:*:*:*:*:*:* | ||
<= svn_344CPE matchmatch criteria | cpe:2.3:a:peercast:peercast:*:*:*:*:*:*:*:* | ||
0.1211CPE matchmatch criteria | cpe:2.3:a:peercast:peercast:0.1211:*:*:*:*:*:*:* | ||
0.1212CPE matchmatch criteria | cpe:2.3:a:peercast:peercast:0.1212:*:*:*:*:*:*:* | ||
0.1215CPE matchmatch criteria | cpe:2.3:a:peercast:peercast:0.1215:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.