CVE-2007-4447
Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1...
Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary code via a long game command in a replay (.rpl) file and (2) cause a denial of service (application crash) via a long SAY command that omits a required LF character; and allow remote Toribash servers to execute arbitrary code via (3) a long game command and (4) a long SAY command that omits a required LF character.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary code via a long game command in a replay (.rpl) file and (2) cause a denial of service (application crash) via a long SAY command that omits a required LF character; and allow remote Toribash servers to execute arbitrary code via (3) a long game command and (4) a long SAY command that omits a required LF character.
- Record
CVE-2007-4447- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary code via a long game command in a replay (.rpl) file and (2) cause a denial of service (application crash) via a long SAY command that omits a required LF character; and allow remote Toribash servers to execute arbitrary code via (3) a long game command and (4) a long SAY command that omits a required LF character.
- Record
CVE-2007-4447- Updated
- 2026-11-02
EUVDEUVD-2007-4430 No score
Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary code via a long game command in a replay (.rpl) file and (2) cause a denial of service (application crash) via a long SAY command that omits a required LF character; and allow remote Toribash servers to execute arbitrary code via (3) a long game command and (4) a long SAY command that omits a required LF character.
- Record
EUVD-2007-4430- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-65w6-c8qp-c68q No score
Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1...
Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary code via a long game command in a replay (.rpl) file and (2) cause a denial of service (application crash) via a long SAY command that omits a required LF character; and allow remote Toribash servers to execute arbitrary code via (3) a long game command and (4) a long SAY command that omits a required LF character.
- Record
GHSA-65w6-c8qp-c68q- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4447 is a high vulnerability (CVSS 7.5) in Toribash, published August 21, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.95%, the 90th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/477025/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/36097
aluigi.org/poc/toribashish.zip
secunia.com/advisories/26507
securityreason.com/securityalert/3033
nvd.nist.gov/vuln/detail/CVE-2007-4447
github.com/advisories/GHSA-65w6-c8qp-c68q