Vendor
Winny
Products
1
CVEs
4
Across products
4
Status
Private
Products
1- 4 CVEs
Recent CVEs
4| CVE | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2006-2007 | 0.01 | — | 0.11 | Apr 25, 2006 | Heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code via long strings to certain commands sent to the file transfer port. | ||
| CVE-2010-2362 | 0.00 | — | 0.00 | Aug 25, 2010 | Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks. | ||
| CVE-2010-2361 | 0.00 | — | 0.00 | Aug 25, 2010 | Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks. | ||
| CVE-2010-2360 | 0.00 | — | 0.05 | Aug 25, 2010 | Multiple buffer overflows in Winny 2.0b7.1 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2006-2007. |
- CVE-2006-2007Apr 25, 2006risk 0.01cvss —epss 0.11
Heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code via long strings to certain commands sent to the file transfer port.
- CVE-2010-2362Aug 25, 2010risk 0.00cvss —epss 0.00
Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks.
- CVE-2010-2361Aug 25, 2010risk 0.00cvss —epss 0.00
Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks.
- CVE-2010-2360Aug 25, 2010risk 0.00cvss —epss 0.05
Multiple buffer overflows in Winny 2.0b7.1 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2006-2007.