← back
CVE-2007-6189

CVE-2007-6189

EPSS 8.1%
A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to execute arbitrary code via a long argument to the InitX method that begins with a "%%" sequence, which is misinterpreted as a Unicode string and decoded twice, leading to improper memory allocation and a heap-based buffer overflow.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/4663unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://research.eeye.com/html/advisories/published/AD20071120.htmlhttp://secunia.com/advisories/27717http://securityreason.com/securityalert/3405http://securitytracker.com/id?1018986https://www.exploit-db.com/exploits/4663http://www.securityfocus.com/archive/1/483986/100/100/threadedhttp://www.vupen.com/english/advisories/2007/3935