CVE-2007-4903 Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allow remote attackers to execute arbitrary code via (1) a long string in the first....
HighCVSS 7.5
EPSS 9.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allow remote attackers to execute arbitrary code via (1) a long string in the first argument to the AcquireContext method or (2) an unspecified vector to the DeleteContext method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ultra shareware ultra crypto component | = 2.0.2007.801 | No fix listed |
References
- 38979 vdb-entry
- 25609 exploit vdb-entry
- 1018674 vdb-entry
- ultracrypto-cryptox-bo(36524) vdb-entry
- 4389 exploit