CVE-2007-2820 Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control (AxKSignSWAT.dll) 2.0.3.3 allow remote attackers to execute arbitrary code via long arguments to the (1) SWAT_Init, (2) SWA...
HighCVSS 7.5
EPSS 5.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control (AxKSignSWAT.dll) 2.0.3.3 allow remote attackers to execute arbitrary code via long arguments to the (1) SWAT_Init, (2) SWAT_InitEx, (3) SWAT_InitEx2, (4) SWAT_InitEx3, and (5) SWAT_Login functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ksignswat | = 2.0.3.3 | No fix listed |
References
- 20070522 KSign KSignSWAT ActiveX Control Multiple Buffer Overflows Vulnerability mailing-list patch
- 36517 vdb-entry
- 25357 patch third-party-advisory vendor-advisory
- 24088 vdb-entry
- ADV-2007-1901 vdb-entry
- ksign-axksignswat-bo(34417) vdb-entry