Lucene search
HistorySep 07, 2015 - 2:59 p.m.
CVE-2015-5624
cve-2015-5624
buffer overflow
execcall
c2lv6.ocx
freebit
elphonebtnv6
activex
remote code execution
crafted html document
click to live service
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.042 Low
EPSS
Percentile
92.3%
Buffer overflow in the ExecCall method in c2lv6.ocx in the FreeBit ELPhoneBtnV6 ActiveX control allows remote attackers to execute arbitrary code via a crafted HTML document, related to the discontinued “Click to Live” service.
Affected configurations
Node
freebitelphonebtnv6_activex_controlMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| freebit:elphonebtnv6_activex_control | freebit elphonebtnv6 activex control | eq | - |
Related
nvd
nvd
CVE-2015-5624
2015-09-07 14:59:01
jvn
jvn
JVN#62078684: ELPhoneBtnV6 ActiveX control vulnerable to buffer overflow
2015-09-07 00:00:00
cvelist
cvelist
CVE-2015-5624
2015-09-07 14:00:00
prion
prion
Buffer overflow
2015-09-07 14:59:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.042 Low
EPSS
Percentile
92.3%
Related for CVE-2015-5624