CVE-2008-0647 Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 (aka Lianzong Game Platform) allow remote attack...
HighCVSS 10.0
EPSS 7.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 (aka Lianzong Game Platform) allow remote attackers to execute arbitrary code via long arguments to the (1) hgs_startGame and (2) hgs_startNotify methods, as exploited in the wild as of February 2008. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ourgame.com glworld | = 2.6.1.29 | No fix listed |
| ourgame.com hangameplugincn18 activex control | All versions | No fix listed |
References
- 28809 third-party-advisory vendor-advisory
- 27626 vdb-entry
- www.symantec.com
- ADV-2008-0427 vdb-entry
- 5153 exploit