Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCertccCVE-2007-5603
HistoryNov 05, 2007 - 6:46 p.m.

CVE-2007-5603

2007-11-0518:46:00
CWE-119
certcc
web.nvd.nist.gov
32
cve-2007-5603
sonicwall
ssl-vpn
netextender
nelaunchctrl
activex
buffer overflow
security vulnerability
remote code execution

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.864

Percentile

98.7%

JSON

Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allows remote attackers to execute arbitrary code via a long string in the second argument to the AddRouteEntry method.

Affected configurations

Nvd
Node
sonicwallssl_vpnRange≤2.1
OR
sonicwallssl_vpnRange≤2.5
VendorProductVersionCPE
sonicwallssl_vpn*cpe:2.3:a:sonicwall:ssl_vpn:*:*:*:*:*:*:*:*

Related

packetstorm 1
checkpoint_advisories 1
cvelist 2
metasploit 1
cert 1
prion 2
exploitdb 2
nvd 2
nessus 1
cve 1
packetstorm
packetstorm
SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow
2009-11-26 00:00:00
checkpoint_advisories
checkpoint_advisories
SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow (CVE-2007-5603)
2011-11-15 00:00:00
cvelist
cvelist
CVE-2007-5603
2007-11-05 18:00:00
CVE-2007-5814
2007-11-05 18:00:00
metasploit
metasploit
SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow
2007-11-01 23:15:34
cert
cert
SonicWall NetExtender NELaunchCtrl ActiveX control stack buffer overflow
2007-11-02 00:00:00
prion
prion
Stack overflow
2007-11-05 18:46:00
Buffer overflow
2007-11-05 18:46:00
exploitdb
exploitdb
SonicWALL SSL-VPN - NetExtender ActiveX Control Buffer Overflow (Metasploit)
2010-05-09 00:00:00
SonicWALL SSL-VPN - 'NeLaunchCtrl' ActiveX Control Remote Command Execution
2007-11-01 00:00:00
nvd
nvd
CVE-2007-5603
2007-11-05 18:46:00
CVE-2007-5814
2007-11-05 18:46:00
nessus
nessus
SonicWALL SSL-VPN NetExtender NELaunchCtrl ActiveX Control Multiple Overflows
2007-11-03 00:00:00
cve
cve
CVE-2007-5814
2007-11-05 18:46:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.864

Percentile

98.7%

JSON
Related for CVE-2007-5603
packetstorm1checkpoint_advisories1cvelist2metasploit1cert1prion2exploitdb2nvd2nessus1cve1