// For flags

CVE-2007-2998

 

Severity Score

4.9
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The Pascal run-time library (PAS$RTL.EXE) before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS Alpha 8.3, does not properly restore PC and PSL values, which allows local users to cause a denial of service (system crash) via certain Pascal code.

La libreria de tiempo de ejecución de Pascal (PAS$RTL.EXE) anterior a 20070418 sobre OpenVMS para Integrity Servers 8.3, y PAS$RTL.EXE anterior a 20070419 sobre OpenVMS Alpha 8.3, no restaura los valores PC y PSL adecuadamente, lo cual permite a usuarios locales provocar denegación de servicio (caida del sistema) a través de cierto código Pascal.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2007-06-04 CVE Reserved
  • 2007-06-04 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-10-27 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Hp
Search vendor "Hp"
 Openvms
Search vendor "Hp" for product "Openvms"
 8.3
Search vendor "Hp" for product "Openvms" and version "8.3"
-
Affected
Hp
Search vendor "Hp"
 Openvms
Search vendor "Hp" for product "Openvms"
 8.3
Search vendor "Hp" for product "Openvms" and version "8.3"
integrity_servers
Affected