Lucene search

CertccCVE-2007-2921

HistoryJun 14, 2007 - 11:30 p.m.

CVE-2007-2921

2007-06-1423:30:00

certcc

web.nvd.nist.gov

cve-2007-2921

buffer overflow

acgm.dll

corel

micrografx

activecgm browser

activex

remote code execution

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.049

Percentile

92.8%

JSON

Multiple buffer overflows in acgm.dll in the Corel / Micrografx ActiveCGM Browser ActiveX control before 7.1.4.19 allow remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd

Node

corelactivecgm_browser

VendorProductVersionCPE
corelactivecgm_browser*cpe:2.3:a:corel:activecgm_browser:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
corel	activecgm_browser	*	cpe:2.3:a:corel:activecgm_browser::::::::

References

secunia.com/advisories/25672

www.kb.cert.org/vuls/id/983249

www.nessus.org/plugins/index.php?view=single&id=25494

www.osvdb.org/35468

www.securityfocus.com/bid/24464

www.vupen.com/english/advisories/2007/2191

exchange.xforce.ibmcloud.com/vulnerabilities/34863

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.049

Percentile

92.8%

JSON

Related for CVE-2007-2921