Heap overflow

2008-03-1217:44:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

Low

0.145 Low

EPSS

Percentile

95.8%

JSON

Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method.

CPENameOperatorVersion
antivirus_online_update_moduleeq2007.12.29.29

CPE	Name	Operator	Version
	antivirus_online_update_module	eq	2007.12.29.29

References

secunia.com/advisories/29204

www.securityfocus.com/bid/28172

www.vupen.com/english/advisories/2008/0857/references

exchange.xforce.ibmcloud.com/vulnerabilities/41088

www.exploit-db.com/exploits/5225