CVE-2007-2918

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Logitech VideoCall - ActiveX Control Buffer Overflow (Metasploit)2010-05-09 · remote · windows · Verified

Impact

Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) StarClient.dll, (4) ComLink in (c) uicomlink.dll, and (5) WebCamXMP in (d) wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a denial of service (browser crash) and execute arbitrary code via unspecified vectors.

Affected products

References

• NVD record
• CVE.org record
• http://osvdb.org/36820
• http://osvdb.org/36821
• http://osvdb.org/36822
• http://osvdb.org/36823
• http://osvdb.org/36824
• http://secunia.com/advisories/25514
• http://www.kb.cert.org/vuls/id/330289
• http://www.securityfocus.com/bid/24254
• http://www.vupen.com/english/advisories/2007/2018
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34658
• http://osvdb.org/36820
• http://osvdb.org/36821
• http://osvdb.org/36822
• http://osvdb.org/36823
• http://osvdb.org/36824
• http://secunia.com/advisories/25514
• http://www.kb.cert.org/vuls/id/330289
• http://www.securityfocus.com/bid/24254
• http://www.vupen.com/english/advisories/2007/2018
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34658