CVE-2007-3675 Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control (kavwebscan.dll) in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via for...
HighCVSS 9.3
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control (kavwebscan.dll) in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via format string specifiers in "various string formatting functions," which trigger heap-based buffer overflows.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kaspersky lab online scanner | <= 5.0.93 | No fix listed |
References
- 20071010 Kaspersky Web Scanner ActiveX Format String Vulnerability third-party-advisory
- 27187 patch third-party-advisory vendor-advisory
- 1018800 patch vdb-entry
- www.kaspersky.com patch
- 26004 patch vdb-entry
- ADV-2007-3455 vdb-entry
- kaspersky-online-activex-format-string(37057) vdb-entry