CVEvulnerability

CVE-2007-1035

7.5 HIGH Published 2007-02-21 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-02-21
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors.

Affected configurations

• drupal audio module • drupal getid3 1.7.1 • drupal mediafield module

References

http://blamcast.net/articles/highly-critical-security-flaws-in-drupal-audio-module blamcast.net
http://drupal.org/node/119385 Patch, Vendor Advisory
http://osvdb.org/35161 osvdb.org
http://www.securityfocus.com/bid/22587 Patch
http://www.vupen.com/english/advisories/2007/0635 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32542 exchange.xforce.ibmcloud.com
http://blamcast.net/articles/highly-critical-security-flaws-in-drupal-audio-module blamcast.net
http://drupal.org/node/119385 Patch, Vendor Advisory
http://osvdb.org/35161 osvdb.org
http://www.securityfocus.com/bid/22587 Patch
http://www.vupen.com/english/advisories/2007/0635 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32542 exchange.xforce.ibmcloud.com