CVE-2007-2881

critical

Description

Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/34524

http://www.vupen.com/english/advisories/2007/1957

http://www.securitytracker.com/id?1018130

http://www.securityfocus.com/bid/24165

http://www.kb.cert.org/vuls/id/746889

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102927-1

http://secunia.com/advisories/25405

http://osvdb.org/35841

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=536

Details

Source: Mitre, NVD

Published: 2007-05-29

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H