high7.5Public exploit code
CVE-2006-6488
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used by ICONICS OPC Enab…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ICONICS Vessel / Gauge / Switch 8.02.140 - ActiveX Buffer Overflow (Metasploit)2008-09-25 · remote · windows · Verified
Impact
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long (1) FileName or (2) Filter argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iconics | Dialog Wrapper Module Activex Control | through 8.4.165.0 |
References
- NVD record
- CVE.org record
- http://osvdb.org/32552
- http://secunia.com/advisories/23583
- http://www.kb.cert.org/vuls/id/251969
- http://www.securityfocus.com/bid/21849
- http://www.vupen.com/english/advisories/2007/0025
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31228
- http://osvdb.org/32552
- http://secunia.com/advisories/23583
- http://www.kb.cert.org/vuls/id/251969
- http://www.securityfocus.com/bid/21849
- http://www.vupen.com/english/advisories/2007/0025
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31228