CVE-2007-5217

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 30.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-10-05 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) Kazaa 3.2.7 and (2) Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Altnet Download Manager: 4.0.0.6
Grokster: 2.6
Kazaa Media Desktop: 3.2.7

References

http://osvdb.org/37785
http://osvdb.org/38435
http://secunia.com/advisories/26970
http://secunia.com/advisories/26972
http://www.securityfocus.com/bid/25903
http://www.vupen.com/english/advisories/2007/3335
http://www.vupen.com/english/advisories/2007/3336
https://exchange.xforce.ibmcloud.com/vulnerabilities/36929
http://osvdb.org/37785
http://osvdb.org/38435
http://secunia.com/advisories/26970
http://secunia.com/advisories/26972

Get alerted when CVE-2007-5217 or the next vulnerability affects your stack