CVE

Id
28147  
CVE No.
CVE-2007-4790  
Status
Candidate  
Description
Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01, 6 SP1 and SP2, and 7; allows remote attackers to execute arbitrary code via a long first argument to the FoxDoCmd function.  
Phase
Assigned (20070910)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
292008 28147 CVE-2007-4790 MILW0RM:4369  View
292009 28147 CVE-2007-4790 URL:http://www.milw0rm.com/exploits/4369  View
292010 28147 CVE-2007-4790 HP:HPSBST02314  View
292011 28147 CVE-2007-4790 URL:http://marc.info/?l=bugtraq&m=120361015026386&w=2  View
292012 28147 CVE-2007-4790 HP:SSRT080016  View
292013 28147 CVE-2007-4790 URL:http://marc.info/?l=bugtraq&m=120361015026386&w=2  View
292014 28147 CVE-2007-4790 MS:MS08-010  View
292015 28147 CVE-2007-4790 URL:http://www.microsoft.com/technet/security/bulletin/ms08-010.mspx  View
292016 28147 CVE-2007-4790 CERT:TA08-043C  View
292017 28147 CVE-2007-4790 URL:http://www.us-cert.gov/cas/techalerts/TA08-043C.html  View
292018 28147 CVE-2007-4790 BID:25571  View
292019 28147 CVE-2007-4790 URL:http://www.securityfocus.com/bid/25571  View
292020 28147 CVE-2007-4790 VUPEN:ADV-2008-0512  View
292021 28147 CVE-2007-4790 URL:http://www.vupen.com/english/advisories/2008/0512/references  View
292022 28147 CVE-2007-4790 OVAL:oval:org.mitre.oval:def:5481  View
292023 28147 CVE-2007-4790 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5481  View
292024 28147 CVE-2007-4790 SECTRACK:1019378  View
292025 28147 CVE-2007-4790 URL:http://www.securitytracker.com/id?1019378  View
292026 28147 CVE-2007-4790 XF:foxpro-fpole-activex-bo(36496)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52005 JVNDB-2007-000668 IBM AIX の ibstat コマンドにおけるバッファオーバーフローの脆弱性 IBM AIX の devices.common.IBM.fc.rte には ibstat コマンドにおいてバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-4792 28147 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000668.html  View