PT-2007-1791 · Motive · Activeutils.Dll+3

Publicado 2007-08-15 · Atualizado 2018-10-12 · CVE-2007-0319

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Motive Service Activation Manager versions 5.1 and earlier Motive Self Service Manager versions 5.1 and earlier

Description: The issue is related to multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData ActiveX control. This control is part of the ActiveUtils.dll in Motive Service Activation Manager and Self Service Manager. The overflows allow remote attackers to execute arbitrary code via unspecified vectors.

Recommendations: For Motive Service Activation Manager versions 5.1 and earlier, update to a version that fixes the buffer overflow issue in the ActiveUtils.dll. For Motive Self Service Manager versions 5.1 and earlier, update to a version that fixes the buffer overflow issue in the ActiveUtils.dll. As a temporary workaround, consider disabling the ActiveX control ActiveEmailTest.EmailData until a patch is available.

Correção

Identificadores relacionados

CVE-2007-0319

Produtos afetados

Activeemailtest.Emaildata

Activeutils.Dll

Motive Self Service Manager

Motive Service Activation Manager

Referências · 10

• http://securityfocus.com/bid/25312 · Nota
• http://secunia.com/advisories/26481 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36034 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0319 · Nota de Segurança
• http://securitytracker.com/id?1018571 · Nota
• http://osvdb.org/37710 · Nota
• http://motive.com/securitybulletin_08122007.asp · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-045 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/747233 · Nota
• http://vupen.com/english/advisories/2007/2881 · Nota