Lucene search
HistoryApr 17, 2009 - 12:30 a.m.
CVE-2008-1107
cve-2008-1107
buffer overflow
activex control
danske bank
e-sec
arbitrary code execution
8.1 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.167 Low
EPSS
Percentile
96.1%
Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control (DanskeSikker.ocx) 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function.
Affected configurations
Node
danskebankdanskesikker.ocxRange≤3.1.0.48
| CPE | Name | Operator | Version |
|---|---|---|---|
| danskebank:danskesikker.ocx | danskebank danskesikker.ocx | le | 3.1.0.48 |
Related
cvelist
cvelist
CVE-2008-1107
2009-04-17 00:00:00
prion
prion
Stack overflow
2009-04-17 00:30:00
securityvulns
securityvulns
seebug
seebug
Danske Bank Danske e-Sec ActiveX控件缓冲区溢出漏洞
2009-04-21 00:00:00
nvd
nvd
CVE-2008-1107
2009-04-17 00:30:00
8.1 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.167 Low
EPSS
Percentile
96.1%
Related for CVE-2008-1107