CVE

Id
28159  
CVE No.
CVE-2007-4802  
Status
Candidate  
Description
Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via (1) a long eighth argument to the SetInfo method in a certain ActiveX control in glItemCom.dll or (2) a long second argument to the SetClientInfo method in a certain ActiveX control in glitemflat.dll.  
Phase
Assigned (20070911)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
292136 28159 CVE-2007-4802 MILW0RM:4366  View
292137 28159 CVE-2007-4802 URL:http://www.milw0rm.com/exploits/4366  View
292138 28159 CVE-2007-4802 MILW0RM:4372  View
292139 28159 CVE-2007-4802 URL:http://www.milw0rm.com/exploits/4372  View
292140 28159 CVE-2007-4802 BID:25565  View
292141 28159 CVE-2007-4802 URL:http://www.securityfocus.com/bid/25565  View
292142 28159 CVE-2007-4802 BID:25586  View
292143 28159 CVE-2007-4802 URL:http://www.securityfocus.com/bid/25586  View
292144 28159 CVE-2007-4802 OSVDB:45886  View
292145 28159 CVE-2007-4802 URL:http://osvdb.org/45886  View
292146 28159 CVE-2007-4802 OSVDB:45887  View
292147 28159 CVE-2007-4802 URL:http://osvdb.org/45887  View
292148 28159 CVE-2007-4802 XF:globallink-glitemcom-bo(36470)  View
292149 28159 CVE-2007-4802 URL:http://xforce.iss.net/xforce/xfdb/36470  View
292150 28159 CVE-2007-4802 XF:globallink-glitemflat-bo(36501)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53921 JVNDB-2007-002613 AuraCMS における SQL インジェクションの脆弱性 AuraCMS には、SQL インジェクションの脆弱性が存在します。 CVE-2007-4804 28159 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002613.html  View