CVE-2007-4145

EPSS 5.3%

Heap-based buffer overflow in the BlueSkychat (BlueSkyCat) ActiveX control (V2.V2Ctrl.1) in v2.ocx 8.1.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the second argument to the ConnecttoServer method.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/30441unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://codeaudit.blogspot.com/http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064995.html http://securityreason.com/securityalert/2959 https://exchange.xforce.ibmcloud.com/vulnerabilities/35699 http://www.securityfocus.com/archive/1/475150/100/0/threaded http://www.securityfocus.com/bid/25149 http://www.vulnhunt.com/advisories/CAL-20070730-1_BlueSkyCat_v2.ocx_ActiveX_remote_heap_overflow_vulnerability_en.txt