Lucene search

MitreCVE-2008-0647

HistoryFeb 07, 2008 - 9:00 p.m.

CVE-2008-0647

2008-02-0721:00:00

CWE-119

mitre

web.nvd.nist.gov

cve-2008-0647

hangameplugincn18

buffer overflow

ourgame glworld

activex control

remote code execution

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.163

Percentile

96.0%

JSON

Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 (aka Lianzong Game Platform) allow remote attackers to execute arbitrary code via long arguments to the (1) hgs_startGame and (2) hgs_startNotify methods, as exploited in the wild as of February 2008. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

ourgame.comglworldMatch2.6.1.29

ourgame.comhangameplugincn18_activex_control

VendorProductVersionCPE
ourgame.comglworld2.6.1.29cpe:2.3:a:ourgame.com:glworld:2.6.1.29:*:*:*:*:*:*:*
ourgame.comhangameplugincn18_activex_control*cpe:2.3:a:ourgame.com:hangameplugincn18_activex_control:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ourgame.com	glworld	2.6.1.29	cpe:2.3:a:ourgame.com:glworld:2.6.1.29:::::::*
ourgame.com	hangameplugincn18_activex_control	*	cpe:2.3:a:ourgame.com:hangameplugincn18_activex_control::::::::

References

secunia.com/advisories/28809

www.securityfocus.com/bid/27626

www.symantec.com/enterprise/security_response/weblog/2008/02/zeroday_exploit_for_lianzong_g.html

www.vupen.com/english/advisories/2008/0427

www.exploit-db.com/exploits/5153

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.163

Percentile

96.0%

JSON

Related for CVE-2008-0647