CVE-2014-4647 Stack-based buffer overflow in the loadExtensionFactory method in the TSVisualization ActiveX control in Embarcadero ER/Studio Data Architect allows remote attackers to execute arbitrary code via unsp...

MediumCVSS 6.8 EPSS 2.7%

Published: 2014-08-07 13:00
Updated: 2026-06-17 03:10
Exploit status: No public exploit known

Description

Stack-based buffer overflow in the loadExtensionFactory method in the TSVisualization ActiveX control in Embarcadero ER/Studio Data Architect allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

Product	Affected versions	Fixed in
embarcadero erstudio data architect	All versions	No fix listed

References

CVSS v2.0

6.8 Medium

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.68% (percentile 86.0)
CWE: CWE-119

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.