PT-2007-6707 · Globallink · Glchat.Ocx+1

Publicado 2007-10-30 · Atualizado 2017-07-29 · CVE-2007-5722

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GLChat.ocx version 2.5.1.32 in GlobalLink version 2.7.0.8

Description A stack-based buffer overflow issue exists in a certain ActiveX control, allowing remote attackers to execute arbitrary code via a long first argument to the ConnectAndEnterRoom method. This issue was originally exploited in the wild in October 2007.

Recommendations For GLChat.ocx version 2.5.1.32 in GlobalLink version 2.7.0.8, consider disabling the ConnectAndEnterRoom method as a temporary workaround until a patch is available. Restrict access to the GLCHAT.GLChatCtrl.1 control to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-5722

Produtos afetados

Glchat.Ocx

Globallink

Referências · 6

• 🔥 http://securityfocus.com/bid/26244 · Exploit
• 🔥 https://exploit-db.com/exploits/30720 · Exploit
• http://osvdb.org/38837 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5722 · Nota de Segurança
• http://secunia.com/advisories/27500 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38222 · Nota