CVE-2007-6387
CVE-2007-6387
Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics AnswerWorks, and Intuit Clearly Bookkeeping, ProSeries, QuickBooks, Quicken, QuickTax, and TurboTax, allow remote attackers to execute arbitrary code via long arguments to the (1) GetHistory, (2) GetSeedQuery, (3) SetSeedQuery, and possibly other methods. NOTE: some of these details are obtained from third party information.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 1
cve_referencewww.exploit-db.com/exploits/4825não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Quer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
http://secunia.com/advisories/26566http://secunia.com/advisories/26670https://exchange.xforce.ibmcloud.com/vulnerabilities/39004http://support.quickbooks.intuit.com/support/qbupdate2007/Default.aspxhttps://www.exploit-db.com/exploits/4825http://www.intuit.com/support/security/http://www.securityfocus.com/bid/26815http://www.vantagelinguistics.com/answerworks/release/http://www.vupen.com/english/advisories/2007/4194http://www.vupen.com/english/advisories/2007/4195