Lucene search

K
cve[email protected]CVE-2007-2648
HistoryMay 14, 2007 - 9:19 p.m.

CVE-2007-2648

2007-05-1421:19:00
web.nvd.nist.gov
24
cve-2007-2648
buffer overflow
clever database comparer
activex control
security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.22 Low

EPSS

Percentile

96.5%

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function.

Affected configurations

NVD
Node
clever_componentsclever_database_comparerMatch2.2

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.22 Low

EPSS

Percentile

96.5%

Related for CVE-2007-2648