critical10.0Public exploit code
CVE-2008-1307
Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows r…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- KingSoft - 'UpdateOcx2.dll SetUninstallName()' Heap Overflow (PoC)2008-03-10 · dos · windows · Verified
Impact
Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kingsoft | Antivirus Online Update Module | Version 2007.12.29.29 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29204
- http://www.securityfocus.com/bid/28172
- http://www.vupen.com/english/advisories/2008/0857/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41088
- https://www.exploit-db.com/exploits/5225
- http://secunia.com/advisories/29204
- http://www.securityfocus.com/bid/28172
- http://www.vupen.com/english/advisories/2008/0857/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41088
- https://www.exploit-db.com/exploits/5225