CVE-2007-2856 Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary...
HighCVSS 9.3
EPSS 7.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2855.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dart powertcp zip compression | = 1.8.5.3 | No fix listed |
References
- 38111 vdb-entry
- retrogod.altervista.org exploit
- 20070524 Dart Communications PowerTCP Service Control (DartService.dll 3.1.3.3) remote buffer overflow mailing-list
- 20070525 IE 6 / Dart Communications PowerTCP ZIP Compression Control (DartZip.dll 1.8.5.3) remote buffer overflow mailing-list
- 24142 vdb-entry
- 24163 vdb-entry
- powertcp-service-activex-bo(34494) vdb-entry
- powertcp-compression-bo(34520) vdb-entry