CVE

Id
23531  
CVE No.
CVE-2007-0174  
Status
Candidate  
Description
Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the (1) astrVerion parameter to the SendChatRoomOpt function or (2) the astrDownDir parameter to the SendDownLoadFile function.  
Phase
Assigned (20070110)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
227794 23531 CVE-2007-0174 BUGTRAQ:20070109 Sina UC ActiveX Multiple Remote Stack Overflow  View
227795 23531 CVE-2007-0174 URL:http://www.securityfocus.com/archive/1/archive/1/456378/100/0/threaded  View
227796 23531 CVE-2007-0174 FULLDISC:20070109 Sina UC ActiveX Multiple Remote Stack Overflow  View
227797 23531 CVE-2007-0174 URL:http://marc.info/?l=full-disclosure&m=116832852700467&w=2  View
227798 23531 CVE-2007-0174 MISC:http://secway.org/advisory/ad20070109EN.txt  View
227799 23531 CVE-2007-0174 BID:21958  View
227800 23531 CVE-2007-0174 URL:http://www.securityfocus.com/bid/21958  View
227801 23531 CVE-2007-0174 VUPEN:ADV-2007-0093  View
227802 23531 CVE-2007-0174 URL:http://www.vupen.com/english/advisories/2007/0093  View
227803 23531 CVE-2007-0174 OSVDB:32659  View
227804 23531 CVE-2007-0174 URL:http://osvdb.org/32659  View
227805 23531 CVE-2007-0174 SECUNIA:23638  View
227806 23531 CVE-2007-0174 URL:http://secunia.com/advisories/23638  View
227807 23531 CVE-2007-0174 XF:sinauc-sendchatroomopt-bo(31348)  View
227808 23531 CVE-2007-0174 URL:http://xforce.iss.net/xforce/xfdb/31348  View
227809 23531 CVE-2007-0174 XF:sinauc-senddownloadfile-bo(31350)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52673 JVNDB-2007-001365 GForge の search/advanced_search.php におけるクロスサイトスクリプティングの脆弱性 GForge の search/advanced_search.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-0176 23531 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001365.html  View