CVE-2007-0174
- State
- Published
- Severity
- Not scored
- Published
- Jan 11, 2007
- Updated
- Aug 7, 2024
- Reserved
- Jan 10, 2007
Description
Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the (1) astrVerion parameter to the SendChatRoomOpt function or (2) the astrDownDir parameter to the SendDownLoadFile function.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://secway.org/advisory/ad20070109EN.txt
- 21958vdb-entry
- sinauc-senddownloadfile-bo(31350)vdb-entry
- sinauc-sendchatroomopt-bo(31348)vdb-entry
- 32659vdb-entry
- 20070109 Sina UC ActiveX Multiple Remote Stack Overflowmailing-list
- 20070109 Sina UC ActiveX Multiple Remote Stack Overflowmailing-list
- 23638third-party-advisory
- ADV-2007-0093vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.