Unscored severity · published Mar 7, 2007
CVE-2006-7157
Buffer overflow in Google Earth v4.0.2091 (beta) allows remote user-assisted attackers to cause a denial of service (crash) via a KML or KMZ file with a long href element
–
CVSS
7.5%
EPSS
No
On KEV
Description
Buffer overflow in Google Earth v4.0.2091 (beta) allows remote user-assisted attackers to cause a denial of service (crash) via a KML or KMZ file with a long href element.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.5% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EA
Earth · Google
4.0.2091 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-7157
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-7157
Not Applicable
http://marc.info/?l=full-disclosure&m=116068034629718&w=2
Broken Link
http://securitydot.net/xpl/exploits/vulnerabilities/articles/1660/exploit.html
Not Applicable
http://securityreason.com/securityalert/2375
www.securityfocus.com
http://www.securityfocus.com/archive/1/448544/100/0/threaded
Third Party Advisory
http://www.securityfocus.com/bid/20464
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29502
More from Earth
7.8
CVE-2020-8895
Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute…
5.9
CVE-2020-8896
A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 allows an attacker to perform a Man-in-the-Middle attack using…
–
CVE-2010-3134
Untrusted search path vulnerability in Google Earth 5.1.3535.3218 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks…