CVE-2008-1107 Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control (DanskeSikker.ocx) 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary co...
HighCVSS 9.3
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control (DanskeSikker.ocx) 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| danskebank danskesikker.ocx | <= 3.1.0.48 | No fix listed |
References
- 53715 vdb-entry
- 29635 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 20090416 Secunia Research: Danske Bank e-Sec Control Module Error Logging Buffer Overflow mailing-list
- 34549 vdb-entry
- ADV-2009-1047 vdb-entry vendor-advisory
- danske-esec-activex-bo(49903) vdb-entry