{"id":"CVE-2007-3314","aliases":["EUVD-2007-3304","GHSA-hqqh-w4r2-5w25"],"status":"published","title":"Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable...","description":"Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portable Executable Viewer 1.00 (English Trial), allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.43408,"percentile":0.98744,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2007-06-21T18:00:00Z","modified":"2026-06-16T22:41:29Z","exploits":[{"source":"exploitdb","id":"EDB-16656","title":"Altap Salamander 2.5 PE Viewer - Local Buffer Overflow (Metasploit)","type":"local","platform":"windows","date":"2010-12-16","verified":true,"url":"https://www.exploit-db.com/exploits/16656"},{"source":"metasploit","id":"exploit/windows/fileformat/altap_salamander_pdb","title":"Altap Salamander 2.5 PE Viewer Buffer Overflow","type":"exploit","platform":"Windows","date":"2007-06-19","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/fileformat/altap_salamander_pdb"}],"products":[{"vendor":"altap","product":"portable_executable_viewer"},{"vendor":"altap","product":"servant_salamander"}],"references":[{"url":"http://secunia.com/advisories/25732","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://osvdb.org/37579","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/bid/24557","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/2268","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34938","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://vuln.sg/salamander25-en.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3314"},{"url":"https://github.com/advisories/GHSA-hqqh-w4r2-5w25"}],"sources":{"cve":[{"id":"CVE-2007-3314","description":"Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portable Executable Viewer 1.00 (English Trial), allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file.","status":"published","published":"2007-06-21T18:00:00Z","modified":"2024-08-07T14:14:12.908Z","updated_at":"2026-11-02T13:32:56.730199Z"}],"euvd":[{"id":"EUVD-2007-3304","description":"Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portable Executable Viewer 1.00 (English Trial), allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file.","status":"published","published":"2007-06-21T18:00:00Z","modified":"2024-08-07T14:14:12Z","updated_at":"2026-11-03T01:38:16.991878Z"}],"ghsa":[{"id":"GHSA-hqqh-w4r2-5w25","title":"Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable...","description":"Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portable Executable Viewer 1.00 (English Trial), allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file.","status":"published","published":"2022-05-01T18:12:24Z","modified":"2023-01-31T05:04:29Z","updated_at":"2026-11-02T14:48:40.522625Z"}],"nvd":[{"id":"CVE-2007-3314","description":"Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portable Executable Viewer 1.00 (English Trial), allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file.","status":"published","published":"2007-06-21T18:30:00Z","modified":"2026-06-16T22:41:29.54Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:17.002124Z"}]}}