Lucene search

[email protected]CVE-2008-0647

HistoryFeb 07, 2008 - 9:00 p.m.

CVE-2008-0647

2008-02-0721:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-0647

hangameplugincn18

buffer overflow

ourgame glworld

activex control

remote code execution

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.125 Low

EPSS

Percentile

95.5%

JSON

Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 (aka Lianzong Game Platform) allow remote attackers to execute arbitrary code via long arguments to the (1) hgs_startGame and (2) hgs_startNotify methods, as exploited in the wild as of February 2008. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

ourgame.comglworldMatch2.6.1.29

ourgame.comhangameplugincn18_activex_control

CPENameOperatorVersion
ourgame.com:glworldourgame.com glworldeq2.6.1.29
ourgame.com:hangameplugincn18_activex_controlourgame.com hangameplugincn18 activex controleq*

CPE	Name	Operator	Version
ourgame.com:glworld	ourgame.com glworld	eq	2.6.1.29
ourgame.com:hangameplugincn18_activex_control	ourgame.com hangameplugincn18 activex control	eq	*

References

secunia.com/advisories/28809

www.securityfocus.com/bid/27626

www.symantec.com/enterprise/security_response/weblog/2008/02/zeroday_exploit_for_lianzong_g.html

www.vupen.com/english/advisories/2008/0427

www.exploit-db.com/exploits/5153

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.125 Low

EPSS

Percentile

95.5%

JSON

Related for CVE-2008-0647

cvelist1 nvd1 prion1