CVE-2007-2489: Livedata Protocol Server

High severity, CVSS 10.0. EPSS: 8.4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in LiveData Protocol Server 5.00.045, and other versions before update 500062 (5.00.062), allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted request for a WSDL file that causes a negative length to be used in a strncpy call.

Affected products

• Livedata Protocol Server: up to and including 5.00.045

Published 2007-05-03. Last modified 2026-06-16.