CVE-2007-6387

🗓️ 15 Dec 2007 02:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 63 Views🌐 WEB

CVE-2007-6387: Stack-based buffer overflows in awApi4.AnswerWorks.1 ActiveX contro

Reporter	Title	Published	Views	Family All 9
0day.today	Vantage Linguistics AnswerWorks 4 API ActiveX Control BoF Exploit	31 Dec 200700:00	–	zdt
Cvelist	CVE-2007-6387	15 Dec 200702:00	–	cvelist
Exploit DB	Vantage Linguistics AnswerWorks 4 - API ActiveX Control Buffer Overflow	31 Dec 200700:00	–	exploitdb
exploitpack	Vantage Linguistics AnswerWorks 4 - API ActiveX Control Buffer Overflow	31 Dec 200700:00	–	exploitpack
NVD	CVE-2007-6387	15 Dec 200702:46	–	nvd
Packet Storm	vantage-overflow.txt	31 Dec 200700:00	–	packetstorm
Prion	Stack overflow	15 Dec 200702:46	–	prion
Tenable Nessus	MS07-069: Cumulative Security Update for Internet Explorer (942615)	11 Dec 200700:00	–	nessus
seebug.org	Vantage Linguistics AnswerWorks 4 API ActiveX Control BoF Exploit	1 Jan 200800:00	–	seebug

NVD

Node

intuit bookkeeping

OR

intuit proseries

OR

intuit quickbooks

OR

OR

intuit quicktax

OR

intuit turbo_tax

OR

microsoft activexMatch4.0.0.42

OR

vantage_linquistics answerworks

Source	Link
vupen	www.vupen.com/english/advisories/2007/4194
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/39004
exploit-db	www.exploit-db.com/exploits/4825
secunia	www.secunia.com/advisories/26566
vupen	www.vupen.com/english/advisories/2007/4195
intuit	www.intuit.com/support/security/
securityfocus	www.securityfocus.com/bid/26815
vantagelinguistics	www.vantagelinguistics.com/answerworks/release/
support	www.support.quickbooks.intuit.com/support/qbupdate2007/Default.aspx
secunia	www.secunia.com/advisories/26670

Parameter	Position	Path	Description	CWE
m	nested	awApi4.dll/GetHistory	Stack-based buffer overflow via long arguments to GetHistory in awApi4.ActiveX control (awApi4.dll) allowing remote code execution.	CWE-119
m	nested	awApi4.dll/GetSeedQuery	Stack-based buffer overflow via long arguments to GetSeedQuery in awApi4.ActiveX control (awApi4.dll) allowing remote code execution.	CWE-119
m	nested	awApi4.dll/SetSeedQuery	Stack-based buffer overflow via long arguments to SetSeedQuery in awApi4.ActiveX control (awApi4.dll) allowing remote code execution.	CWE-119

23 Apr 2026 00:35Current

7.8High risk

Vulners AI Score7.8

CVSS 29.3

EPSS0.57182

cve-2007-6387 buffer overflow stack-based overflow awapi4.answerworks.1 activex control vantage linguistics intuit remote code execution nvd