Zenturi ProgramChecker ActiveX Components ActiveX Controls Buffer Overflows (CVE-2007-2987)

Multiple buffer overflow vulnerabilities have been reported in Zenturi ProgramChecker. The vulnerabilities are due to a data validation failure, resulting in a buffer overflow. A remote attacker may exploit these vulnerabilities by enticing a target user to open a specially crafted HTML file...

CVE-2007-2987

creationtimestamp| type| source ---|---|--- 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16540 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/zenturiprogramcheckerunsafe.rb 2025-02-06...

Zenturi ProgramChecker ActiveX Control Arbitrary File Download.

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Zenturi...

Stack overflow

Stack-based buffer overflow in a certain ActiveX control in sasatl.dll 1.5.0.531 in Zenturi Program Checker ProgramChecker Pro allows remote attackers to execute arbitrary code via a long argument to the Fill method. NOTE: this is probably a different issue than CVE-2007-2987...

CVE-2007-2987

CVE-2007-2987 affects Zenturi ProgramChecker, specifically the sasatl.dll ActiveX Control. The initial description reports multiple buffer overflows in the ActiveX controls (e.g., via DebugMsgLog or DoFileProperties) that could allow remote code execution through unspecified vectors. Connected ad...