Vulnerability detail
Enriched intelligence for a single CVE
Medium
CVE-2007-4428
PUBLISHEDLhaz 1.33 allows remote attackers to execute arbitrary code via unknown vectors, as actively exploited in August 2007 by the Exploit-LHAZ.a gzip...
- Vendor
- Lhaz
- Product
- Lhaz 1.33
- Published
- Aug 20, 2007
- EPSS
- —
Automate this intelligence with the Pro API
Everything on this page — CVSS, EPSS, exploit status, PoCs, scanner integrations, mentions, tags, and immediate honeypot data — is available programmatically for VM, SOC, and CTI workflows.
Description
Lhaz 1.33 allows remote attackers to execute arbitrary code via unknown vectors, as actively exploited in August 2007 by the Exploit-LHAZ.a gzip file, a different issue than CVE-2006-4116.
CVSS scores
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitation status
Exploited in the wild
Recorded 2007-08-20 19:00:00 UTC · CVE
References
- http://www.securityfocus.com/bid/25351
- http://osvdb.org/39629
- http://vil.mcafeesecurity.com/vil/content/v_142976.htm
- http://secunia.com/advisories/26532
- http://www.vupen.com/english/advisories/2007/2930
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36120
- http://www.avertlabs.com/research/blog/index.php/2007/08/17/targeted-zero-day-attack-against-free-tools-lhaz/
Known exploited vulnerability sources
Catalogues that list this CVE as a known exploited vulnerability.
| Source | Added |
|---|---|
| CVE First | 2007-08-20 19:00 UTC |
Timeline
-
CVE ID Reserved
-
CVE Published to Public
-
Added to KEVIntel