Lucene search

K
cveMitreCVE-2007-2564
HistoryMay 09, 2007 - 6:19 p.m.

CVE-2007-2564

2007-05-0918:19:00
mitre
web.nvd.nist.gov
21
cve-2007-2564
buffer overflow
sienzo digital music mentor
dmm 2.6.0.4
activex control
dskernel2.dll
remote code execution
lockmodules
unlockmodule

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.098

Percentile

94.9%

Multiple stack-based buffer overflows in the Sienzo Digital Music Mentor (DMM) 2.6.0.4 ActiveX control (DSKernel2.dll) allow remote attackers to execute arbitrary code via a long argument to the (1) LockModules or (2) UnlockModule function.

Affected configurations

Nvd
Node
sienzodigital_music_mentorMatch2.6.0.4
VendorProductVersionCPE
sienzodigital_music_mentor2.6.0.4cpe:2.3:a:sienzo:digital_music_mentor:2.6.0.4:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.098

Percentile

94.9%

Related for CVE-2007-2564