Lucene search

K
cve[email protected]CVE-2007-5722
HistoryOct 30, 2007 - 9:46 p.m.

CVE-2007-5722

2007-10-3021:46:00
CWE-119
web.nvd.nist.gov
19
cve-2007-5722
glchat.ocx
globallink 2.7.0.8
buffer overflow
activex control
remote code execution
security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.102 Low

EPSS

Percentile

95.0%

Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourgame GLWorld and possibly other products, allows remote attackers to execute arbitrary code via a long first argument to the ConnectAndEnterRoom method, possibly involving the GLCHAT.GLChatCtrl.1 control, as originally exploited in the wild in October 2007. NOTE: some of these details are obtained from third party information. NOTE: this was originally reported as a heap-based issue by some sources.

Affected configurations

NVD
Node
ourgame.comgloballink
AND
ourgame.comglworld

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.102 Low

EPSS

Percentile

95.0%

Related for CVE-2007-5722