SonicWALL SSL-VPN E-Class ActiveX Control Multiple Buffer Overflow Vulnerabilities

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control Aventail.EPInstaller before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long 1 CabURL and 2 Location arguments to the Install3rdPartyComponent method. CVE:...

CVE-2010-2583

The CVE-2010-2583 vulnerability affects SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller). It is a stack-based buffer overflow in the Install3rdPartyComponent method that can be triggered by excessively long CabURL and Location arguments, potentially allowi...

Secunia Research: SonicWALL SSL-VPN End-Point ActiveX Control Buffer Overflow

====================================================================== Secunia Research 29/10/2010 - SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control - - "Install3rdPartyComponent" Method Buffer Overflow - ======================================================================...