Lucene search
HistoryMar 12, 2008 - 5:44 p.m.
CVE-2008-1307
cve-2008-1307
heap-based buffer overflow
kupdateobj2
class activex control
kingsoft antivirus
remote code execution
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.1 High
AI Score
Confidence
High
0.145 Low
EPSS
Percentile
95.8%
Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method.
Affected configurations
Node
kingsoftantivirus_online_update_moduleMatch2007.12.29.29
| CPE | Name | Operator | Version |
|---|---|---|---|
| kingsoft:antivirus_online_update_module | kingsoft antivirus online update module | eq | 2007.12.29.29 |
Related
cvelist
cvelist
CVE-2008-1307
2008-03-12 17:00:00
nvd
nvd
CVE-2008-1307
2008-03-12 17:44:00
prion
prion
Heap overflow
2008-03-12 17:44:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.1 High
AI Score
Confidence
High
0.145 Low
EPSS
Percentile
95.8%
Related for CVE-2008-1307