VeriSign ConfigChk ActiveX Control (VSCnfChk.dll) Buffer Overflow

The ConfigChk ActiveX control, included with VeriSign's PKI product on the remote host and marked as safe for scripting, is reportedly affected by a buffer overflow vulnerability involving its 'VerCompare' method. If an attacker can trick a user on the affected host into visiting a specially...

Verisign multiple products ActiveX element buffer overflow

Buffer overflow in ConfigChk element...

CVE-2007-1083

The CVE-2007-1083 issue affects the VeriSign Configuration Checker ActiveX control (VSCnfChk.dll, version 2.0.0.2) used in VeriSign PKI products. The Nessus entry confirms a stack/buffer overflow in VerCompare() that can allow remote code execution when a user is tricked into loading a crafted we...