PT-2007-3942 · Microsoft · Internet Explorer

Shinnai · Publicado 2007-05-11 · Atualizado 2017-10-11 · CVE-2007-2623

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Remote Display Dev kit version 1.2.1.0

Description The issue is related to multiple buffer overflows in RControl.dll, which can be exploited by remote attackers to cause a denial of service, specifically crashing Internet Explorer 7. This can be achieved by providing a long first argument to the connect function or a long InternalServer property value.

Recommendations For Remote Display Dev kit version 1.2.1.0, consider disabling the connect function or restricting the length of the InternalServer property value to prevent the buffer overflow and subsequent denial of service.

Exploit

Correção

Identificadores relacionados

CVE-2007-2623

Produtos afetados

Internet Explorer

Referências · 7

• 🔥 https://exploit-db.com/exploits/3891 · Exploit
• http://securityfocus.com/bid/23914 · Nota
• http://moaxb.blogspot.com/2007/05/moaxb-10-rcontroldll-v-1210-denial-of.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2623 · Nota de Segurança
• http://osvdb.org/36022 · Nota
• http://shinnai.altervista.org/moaxb/20070510/rControl.txt · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34231 · Nota