CVE-2007-1722 Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote attackers to execute arbitrary code via a long pszUserID argu...
HighCVSS 10.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote attackers to execute arbitrary code via a long pszUserID argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| signkorea skcommax activex control | = 6.6.0.1_3280 | No fix listed |
| signkorea skcommax activex control | = 7.2.0.2 | No fix listed |
References
- 20070327 SignKorea's ActiveX Buffer Overflow Vulnerability mailing-list
- 24587 third-party-advisory vendor-advisory
- 23149 vdb-entry
- ADV-2007-1114 vdb-entry
- skcommax-downloadcertificate-bo(33245) vdb-entry