high7.5Public exploit code
CVE-2007-4903
Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allow remote attackers to execute arbitrary…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ultra Crypto Component - 'CryptoX.dll 2.0' Remote Buffer Overflow2007-09-10 · remote · windows · Verified
Impact
Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allow remote attackers to execute arbitrary code via (1) a long string in the first argument to the AcquireContext method or (2) an unspecified vector to the DeleteContext method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ultra Shareware | Ultra Crypto Component | Version 2.0.2007.801 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/38979
- http://www.securityfocus.com/bid/25609
- http://www.securitytracker.com/id?1018674
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36524
- https://www.exploit-db.com/exploits/4389
- http://osvdb.org/38979
- http://www.securityfocus.com/bid/25609
- http://www.securitytracker.com/id?1018674
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36524
- https://www.exploit-db.com/exploits/4389