onyx --cves cve-2007-1891
CVE-2007-1891
- score
- <0.1
- cvss
- 9.3
- epss
- 6.8%
- published
- 2007-04-18
- kev added
- —
- first seen
Akamai Technologies Download Manager ActiveX Control (DownloadManagerV2.ocx) versions after 2.0.4.4 and before 2.2.1.0 contains a stack-based buffer overflow caused by misinterpretation of the nSize parameter as a byte count instead of a wide character count, letting remote attackers execute arbitrary code, exploit requires remote network access.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
NVD-CWE-Other
References 8
- http://www.kb.cert.org/vuls/id/120241
- http://secunia.com/advisories/24900
- http://www.osvdb.org/34323
- http://www.securityfocus.com/archive/1/465908/100/0/threaded
- http://www.securityfocus.com/bid/23522
- http://www.securitytracker.com/id?1017925
- http://www.vupen.com/english/advisories/2007/1415
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=514