PT-2007-4395 · Microsoft+1 · Windows 2000+2

Rgod · Published 2007-06-07 · Updated 2021-07-23 · CVE-2007-3111

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Provideo Camimage ActiveX control version 1.0.1.5 Internet Explorer 6 on Windows 2000 SP4

Description: The issue is related to a buffer overflow in the Provideo Camimage ActiveX control. This can be exploited by remote attackers to execute arbitrary code via a long URL property value.

Recommendations: For Provideo Camimage ActiveX control version 1.0.1.5, consider disabling the control until a patch is available. For Internet Explorer 6 on Windows 2000 SP4, restrict access to potentially malicious URLs to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-3111

Affected Products

Internet Explorer

Provideo Camimage Activex Control

Windows 2000

References · 7

• 🔥 https://exploit-db.com/exploits/4023 · Exploit
• http://secunia.com/advisories/25479 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3111 · Security Note
• http://osvdb.org/36962 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34691 · Note
• http://vupen.com/english/advisories/2007/2042 · Note
• http://securityfocus.com/bid/24279 · Note