CVE-2006-7157

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-03-07 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in Google Earth v4.0.2091 (beta) allows remote user-assisted attackers to cause a denial of service (crash) via a KML or KMZ file with a long href element.

Affected products

Google Earth Pro: 4.0.2091-beta

References

http://marc.info/?l=full-disclosure&m=116068034629718&w=2
http://securitydot.net/xpl/exploits/vulnerabilities/articles/1660/exploit.html
http://securityreason.com/securityalert/2375
http://www.securityfocus.com/archive/1/448544/100/0/threaded
http://www.securityfocus.com/bid/20464
https://exchange.xforce.ibmcloud.com/vulnerabilities/29502
http://marc.info/?l=full-disclosure&m=116068034629718&w=2
http://securitydot.net/xpl/exploits/vulnerabilities/articles/1660/exploit.html
http://securityreason.com/securityalert/2375
http://www.securityfocus.com/archive/1/448544/100/0/threaded
http://www.securityfocus.com/bid/20464
https://exchange.xforce.ibmcloud.com/vulnerabilities/29502

Get alerted when CVE-2006-7157 or the next vulnerability affects your stack