EUVD-2007-1949

Malware in sbrugna...

Stack overflow

Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2 allow remote attackers to execute arbitrary code via a long string in unspecified arguments to the 1 DownloadCert, 2 DecryptFileByKey, and 3 EncryptFileByKey functions, a different module and vectors th...

CVE-2007-1955

Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2 allow remote attackers to execute arbitrary code via a long string in unspecified arguments to the 1 DownloadCert, 2 DecryptFileByKey, and 3 EncryptFileByKey functions, a different module and vectors th...

CVE-2007-1955

Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2 allow remote attackers to execute arbitrary code via a long string in unspecified arguments to the 1 DownloadCert, 2 DecryptFileByKey, and 3 EncryptFileByKey functions, a different module and vectors th...

CVE-2007-1955

Two CVEs concern SignKorea ActiveX controls and describe stack-based/buffer overflow vulnerabilities that enable remote code execution. CVE-2007-1955 affects SignKorea SKCrypAX ActiveX (module 5.4.1.2); the flaw is triggered by a long string argument to DownloadCert, DecryptFileByKey, or EncryptF...