CVE

Id
25595  
CVE No.
CVE-2007-2238  
Status
Candidate  
Description
Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2) UpdateComponents methods.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255734 25595 CVE-2007-2238 CERT-VN:VU#789121  View
255735 25595 CVE-2007-2238 URL:http://www.kb.cert.org/vuls/id/789121  View
255736 25595 CVE-2007-2238 BID:34532  View
255737 25595 CVE-2007-2238 URL:http://www.securityfocus.com/bid/34532  View
255738 25595 CVE-2007-2238 SECUNIA:34725  View
255739 25595 CVE-2007-2238 URL:http://secunia.com/advisories/34725  View
255740 25595 CVE-2007-2238 VUPEN:ADV-2009-1061  View
255741 25595 CVE-2007-2238 URL:http://www.vupen.com/english/advisories/2009/1061  View
255742 25595 CVE-2007-2238 XF:iag-activex-bo(49888)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51966 JVNDB-2007-000629 Lenovo Access Support の acpRunner ActiveX コントロールにおけるデジタル署名検査の問題 Lenovo Access Support の acpRunner ActiveX コントロールには、acpcontroller.dll および acpir.dll において、ダウンロードソフトウェアのデジタル署名を適切に検査しない問題が存在します CVE-2007-2240 25595 5.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000629.html  View