critical9.3Public exploit code
CVE-2007-3071
Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSellerate SDK allows user-assisted remote a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tango DropBox 3.1.5 + PRO - Activex HeapSpray2015-06-19 · webapps · windows · Verified
- eSellerate SDK 3.6.5 - 'eSellerateControl365.dll' ActiveX Control Buffer Overflow2007-06-04 · remote · windows · Verified
Impact
Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSellerate SDK allows user-assisted remote attackers to execute arbitrary code via a long first argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Digital River | Esellerate Sdk | Version 3.6.5.0 |
References
- NVD record
- CVE.org record
- http://osvdb.org/38803
- http://www.securityfocus.com/bid/24300
- http://www.shinnai.altervista.org/exploits/esellerate.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35003
- http://osvdb.org/38803
- http://www.securityfocus.com/bid/24300
- http://www.shinnai.altervista.org/exploits/esellerate.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35003