Baofeng · Baofeng2 Storm Activex Control · CVE-2007-4816
Name of the Vulnerable Software and Affected Versions:
BaoFeng2 storm ActiveX control in Mps.dll (affected versions not specified)
Description:
The issue is related to multiple buffer overflows in the BaoFeng2 storm ActiveX control. These overflows can be triggered via various means, including a long URL, backImage, or titleImage property value, a long first argument to the `advancedOpen` method, a long argument to the `isDVDPath` or `rawParse` method, or a .smpl file with a long path attribute in an item element in a PlayList. This can potentially allow remote attackers to have an unknown impact.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.