Lucene search

K
cve[email protected]CVE-2007-4802
HistorySep 11, 2007 - 6:17 p.m.

CVE-2007-4802

2007-09-1118:17:00
CWE-119
web.nvd.nist.gov
29
cve-2007-4802
globallink
buffer overflow
remote code execution
activex control
glitemcom.dll
glitemflat.dll

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

High

0.236 Low

EPSS

Percentile

96.6%

Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via (1) a long eighth argument to the SetInfo method in a certain ActiveX control in glItemCom.dll or (2) a long second argument to the SetClientInfo method in a certain ActiveX control in glitemflat.dll.

Affected configurations

NVD
Node
ourgame.comgloballinkMatch2.7.0.8

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

High

0.236 Low

EPSS

Percentile

96.6%

Related for CVE-2007-4802