CVE-2007-2952
Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9...
Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and (2) man-in-the-middle attackers to execute arbitrary code via an HTTP response with a long HTTP version field.
Exploit likelihood
What each source reports
NVD Score used
Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and (2) man-in-the-middle attackers to execute arbitrary code via an HTTP response with a long HTTP version field.
- Record
CVE-2007-2952- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and (2) man-in-the-middle attackers to execute arbitrary code via an HTTP response with a long HTTP version field.
- Record
CVE-2007-2952- Updated
- 2026-11-02
EUVDEUVD-2007-2944 No score
Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and (2) man-in-the-middle attackers to execute arbitrary code via an HTTP response with a long HTTP version field.
- Record
EUVD-2007-2944- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r9wp-938m-vwh5 No score
Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9...
Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and (2) man-in-the-middle attackers to execute arbitrary code via an HTTP response with a long HTTP version field.
- Record
GHSA-r9wp-938m-vwh5- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2952 is a high vulnerability (CVSS 9.3) in Blue Coat Systems Filter, published August 1, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 15.5%, the 96th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/494975/100/0/threaded
secunia.com/secunia_research/2007-61/advisory
exchange.xforce.ibmcloud.com/vulnerabilities/44123
securitytracker.com/id?1020587
Show 8 moreShow less
vupen.com/english/advisories/2008/2263/references
nvd.nist.gov/vuln/detail/CVE-2007-2952
github.com/advisories/GHSA-r9wp-938m-vwh5