CVE

Id
5363  
CVE No.
CVE-2002-0975  
Status
Candidate  
Description
Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter.  
Phase
Modified (20071101)  
Votes
MODIFY(1) Frech | NOOP(5) Armstrong, Christey, Cole, Cox, Foat | REVIEWING(1) Wall  
Comments
Christey> ADDREF MS:MS02-066 - "the patch sets the Kill Bit on a legacy | DirectX ActiveX control which has been retired but which has a | security vulnerability." | ADDREF MSKB:Q810202 - deals with "a security vulnerability | that exists in the DirectX Files Viewer control (Xweb.ocx)" | | Thanks to Andrew G. Tereschenko (the researcher) for this | additional information. | Frech> XF:ms-directx-files-viewer-bo(9877) | Christey> fix typo: "execute arbitrary [CODE]"  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28831 5363 CVE-2002-0975 BUGTRAQ:20020816 Repost: Buffer overflow in Microsoft DirectX Files Viewer xweb.ocx (<2,0,16,15) ActiveX sample  View
28832 5363 CVE-2002-0975 URL:http://marc.info/?l=bugtraq&m=102953851705859&w=2  View
28833 5363 CVE-2002-0975 BID:5489  View
28834 5363 CVE-2002-0975 URL:http://www.securityfocus.com/bid/5489  View
28835 5363 CVE-2002-0975 XF:ms-directx-files-viewer-bo(9877)  View

Related JVN