CVE-2007-2238 Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to....
HighCVSS 9.3
EPSS 45.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2) UpdateComponents methods.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft intelligent application gateway 2007 | All versions | No fix listed |
| Microsoft intelligent application gateway 2007 | <= 3.7 | No fix listed |
References
- 34725 third-party-advisory
- VU#789121 third-party-advisory us-government-resource
- 34532 patch vdb-entry
- ADV-2009-1061 vdb-entry
- iag-activex-bo(49888) vdb-entry