PT-2008-2898 · Kingsoft · Kingsoft Antivirus

Void · Published 2008-03-12 · Updated 2017-09-29 · CVE-2008-1307

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Beijing KingSoft Antivirus Online Update Module version 2007.12.29.29

Description The issue is related to a heap-based buffer overflow in the KUpdateObj2 Class ActiveX control. This occurs when a long argument is passed to the SetUninstallName method, allowing remote attackers to execute arbitrary code.

Recommendations For version 2007.12.29.29, consider disabling the SetUninstallName method in the KUpdateObj2 Class ActiveX control until a patch is available. Restrict access to the UpdateOcx2.dll module to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-1307

Affected Products

Kingsoft Antivirus

References · 6

• 🔥 https://exploit-db.com/exploits/5225 · Exploit
• 🔥 http://securityfocus.com/bid/28172 · Exploit
• http://secunia.com/advisories/29204 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1307 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41088 · Note
• http://vupen.com/english/advisories/2008/0857/references · Note