CVE:CVE-2007-1035
CNNVD:CNNVD-200702-369
getID3 1.7.1版本的某些示范脚本中存在未明漏洞。当在Drupal Mediafield和Audio模块中运行时,远程攻击者可以借助未明向量，读取和删除仁义文件，列出仁义目录并写入空文件或.mp3文件。
solution:Upgrade drupal audio_module to a higher version than *; Upgrade drupal getid3 to a higher version than 1.7.1,and avoid the version 1.7.1; Upgrade drupal mediafield_module to a higher version than *