SingKorea ActiveX buffer overflow
Published:		27.03.2007
Source:		FULL-DISCLOSURE
SecurityVulns ID:		7477
Type:		client
Level:		5/10
Description:		Buffer overflow in DownloadCertificateExt() method.

CVE:

CVE-2007-1722 (Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote attackers to execute arbitrary code via a long pszUserID argument.)

Original document

Alex Park, [Full-disclosure] SignKorea's ActiveX Buffer Overflow Vulnerability (27.03.2007)

Discuss:

Read or add your comments to this news (0 comments)