CVE-2015-5624

2015-09-0714:00:00

jpcert

www.cve.org

AI Score

7.7

Confidence

High

EPSS

0.042

Percentile

92.3%

JSON

Buffer overflow in the ExecCall method in c2lv6.ocx in the FreeBit ELPhoneBtnV6 ActiveX control allows remote attackers to execute arbitrary code via a crafted HTML document, related to the discontinued “Click to Live” service.

References

jvn.jp/en/jp/JVN62078684/index.html

jvndb.jvn.jp/jvndb/JVNDB-2015-000127