CVE-2007-1891 Stack-based buffer overflow in the GetPrivateProfileSectionW function in Akamai Technologies Download Manager ActiveX Control (DownloadManagerV2.ocx) after 2.0.4.4 but before 2.2.1.0 allows remote att...
HighCVSS 9.3
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the GetPrivateProfileSectionW function in Akamai Technologies Download Manager ActiveX Control (DownloadManagerV2.ocx) after 2.0.4.4 but before 2.2.1.0 allows remote attackers to execute arbitrary code, related to misinterpretation of the nSize parameter as a byte count instead of a wide character count.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| akamai technologies download manager | = 2.2.0.0 | No fix listed |
References
- 20070416 Akamai Download Manager ActiveX Stack Buffer Overflow Vulnerability patch third-party-advisory vendor-advisory
- 24900 third-party-advisory
- VU#120241 third-party-advisory us-government-resource
- 34323 vdb-entry
- 20070416 Akamai Technologies Security Advisory 2007-0001 mailing-list
- 23522 vdb-entry
- 1017925 vdb-entry
- ADV-2007-1415 vdb-entry