CVE-2008-1107

Опубликовано: 17 апр. 2009

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control (DanskeSikker.ocx) 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function.

Ссылки

http://osvdb.org/53715
http://secunia.com/advisories/29635
Vendor Advisory
http://secunia.com/secunia_research/2008-17/
Vendor Advisory
http://www.securityfocus.com/archive/1/502725/100/0/threaded
http://www.securityfocus.com/bid/34549
http://www.vupen.com/english/advisories/2009/1047
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49903
http://osvdb.org/53715
http://secunia.com/advisories/29635
Vendor Advisory
http://secunia.com/secunia_research/2008-17/
Vendor Advisory
http://www.securityfocus.com/archive/1/502725/100/0/threaded
http://www.securityfocus.com/bid/34549
http://www.vupen.com/english/advisories/2009/1047
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49903

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:danskebank:danskesikker.ocx:*:*:*:*:*:*:*:*

Версия до 3.1.0.48 (включая)

EPSS

Процентиль: 91%

0.06939

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-xh5m-6qq3-59h2

github

почти 4 года назад