critical9.3Public exploit code
CVE-2007-2987
Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zenturi ProgramChecker - ActiveX Control Arbitrary File Download (Metasploit)2010-11-24 · remote · windows · Verified
- Zenturi NixonMyPrograms Class 'sasatl.dll 1.5.0.531' - Remote Buffer Overflow2007-07-23 · remote · windows · Verified
- Zenturi ProgramChecker - ActiveX 'sasatl.dll' Remote Buffer Overflow2007-06-01 · remote · windows · Verified
Impact
Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the (1) DebugMsgLog or (2) DoFileProperties methods.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zenturi | Zenturi Programchecker | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/36715
- http://secunia.com/advisories/25473
- http://www.kb.cert.org/vuls/id/603529
- http://www.securityfocus.com/bid/24217
- http://www.securityfocus.com/bid/24274
- http://www.vupen.com/english/advisories/2007/1977
- http://osvdb.org/36715
- http://secunia.com/advisories/25473
- http://www.kb.cert.org/vuls/id/603529
- http://www.securityfocus.com/bid/24217
- http://www.securityfocus.com/bid/24274
- http://www.vupen.com/english/advisories/2007/1977