PT-2007-1791 · Motive · Activeutils.Dll+3

Published 2007-08-15 · Updated 2018-10-12 · CVE-2007-0319

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Motive Service Activation Manager versions 5.1 and earlier Motive Self Service Manager versions 5.1 and earlier

Description: The issue is related to multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData ActiveX control. This control is part of the ActiveUtils.dll in Motive Service Activation Manager and Self Service Manager. The overflows allow remote attackers to execute arbitrary code via unspecified vectors.

Recommendations: For Motive Service Activation Manager versions 5.1 and earlier, update to a version that fixes the buffer overflow issue in the ActiveUtils.dll. For Motive Self Service Manager versions 5.1 and earlier, update to a version that fixes the buffer overflow issue in the ActiveUtils.dll. As a temporary workaround, consider disabling the ActiveX control ActiveEmailTest.EmailData until a patch is available.

Fix

Related Identifiers

CVE-2007-0319

Affected Products

Activeemailtest.Emaildata

Activeutils.Dll

Motive Self Service Manager

Motive Service Activation Manager

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2007-0319 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-045 · Vendor Advisory
• http://securityfocus.com/bid/25312 · Note
• http://secunia.com/advisories/26481 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36034 · Note
• http://securitytracker.com/id?1018571 · Note
• http://osvdb.org/37710 · Note
• http://motive.com/securitybulletin_08122007.asp · Note
• http://kb.cert.org/vuls/id/747233 · Note
• http://vupen.com/english/advisories/2007/2881 · Note