NVD

Id
58382  
Name
CVE-2007-6387  
Description
Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics AnswerWorks, and Intuit Clearly Bookkeeping, ProSeries, QuickBooks, Quicken, QuickTax, and TurboTax, allow remote attackers to execute arbitrary code via long arguments to the (1) GetHistory, (2) GetSeedQuery, (3) SetSeedQuery, and possibly other methods. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-12-14  
Modified Date
2011-03-07  
Seq
2007-6387  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
299399 58382 CVE-2007-6387 http://support.quickbooks.intuit.com/support/qbupdate2007/Default.aspx  View
299400 58382 CVE-2007-6387 http://www.intuit.com/support/security/  View
299401 58382 CVE-2007-6387 4825  View
299402 58382 CVE-2007-6387 26815  View
299403 58382 CVE-2007-6387 http://www.vantagelinguistics.com/answerworks/release/  View
299404 58382 CVE-2007-6387 ADV-2007-4194  View
299405 58382 CVE-2007-6387 ADV-2007-4195  View
299406 58382 CVE-2007-6387 vantage-answerworks-bo(39004)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56031 JVNDB-2007-004723 Vantage Linguistics AnswerWorks におけるスタックベースのバッファオーバーフローの脆弱性 Vantage Linguistics AnswerWorks、Intuit Clearly Bookkeeping、ProSeries、QuickBooks、Quicken、QuickTax および TurboTax で使用される awApi4.dll の awApi4.AnswerWorks.1 ActiveX コントロールには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-6387 29742 CVE-2007-6387 58382 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004723.html 2007-12-11 2012-09-25 View