BackWeb LiteInstActivator.dll ActiveX控件栈溢出漏洞

BUGTRAQ ID: 29558 CVECAN ID: CVE-2008-0956 BackWeb Lite Install Runner（LiteInstActivator.dll）是用于在Windows系统上安装软件的ActiveX控件。 LiteInstActivator.dll控件捆绑于Logitech鼠标软件中的Logitech Desktop Messenger，该控件没有正确地验证某处参数的输入，如果用户受骗访问了恶意网页并传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 BackWeb BackWeb 8.1.1.86 Logitech Desktop...

CVE-2008-0956: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager LDM before 2.56, allow remote attackers to execute arbitrary code via...