CVE-2008-4048 Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary code via a long t...
MediumCVSS 6.8
EPSS 6.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary code via a long third argument to the CreateURLShortcut method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| friendly technologies friendly pppoe client | = 3.0.0.57 | No fix listed |
References
- 31644 third-party-advisory vendor-advisory
- 4242 third-party-advisory
- 30891 exploit vdb-entry
- friendly-createurlshortcut-bo(44755) vdb-entry
- 6323 exploit