CVE-2007-2918

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 34%

from disclosure to weapon1073 days

Published on NVDJun 1

1st PoC+1073d

metasploitMay 31

exploitation probability

34%top 2% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) StarClient.dll, (4) ComLink in (c) uicomlink.dll, and (5) WebCamXMP in (d) wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a denial of service (browser crash) and execute arbitrary code via unspecified vectors.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/16511unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/36820 http://osvdb.org/36821 http://osvdb.org/36822 http://osvdb.org/36823 http://osvdb.org/36824 http://secunia.com/advisories/25514 https://exchange.xforce.ibmcloud.com/vulnerabilities/34658 http://www.kb.cert.org/vuls/id/330289 http://www.securityfocus.com/bid/24254 http://www.vupen.com/english/advisories/2007/2018