GIGABYTE Download Center ActiveX array index overflow - security vulnerabilities database

[EN] securityvulns.ru
no-pyccku

GIGABYTE Download Center ActiveX array index overflow
Published: 18.07.2010
Source: BUGTRAQ
SecurityVulns ID: 11007
Type: client
Level: 5/10
Description: Array index overflow in SetDLInfo() method of Dldrv2 ActiveX

CVE: CVE-2010-1518 (Array index error in the SetDLInfo method in the GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via the item argument.)

Original document SECUNIA, Secunia Research: GIGABYTE Dldrv2 ActiveX Control Array Indexing Vulnerability (18.07.2010)

Discuss: Read or add your comments to this news (0 comments)