CVE-2007-6387

35Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendepss 38%

probabilidade de exploração

38%top 2% das CVEs

exploração observada

nãonenhuma fonte reporta

1 exploit(s) público(s)

Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics AnswerWorks, and Intuit Clearly Bookkeeping, ProSeries, QuickBooks, Quicken, QuickTax, and TurboTax, allow remote attackers to execute arbitrary code via long arguments to the (1) GetHistory, (2) GetSeedQuery, (3) SetSeedQuery, and possibly other methods. NOTE: some of these details are obtained from third party information.

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 1

cve_referencewww.exploit-db.com/exploits/4825não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Referências

http://secunia.com/advisories/26566 http://secunia.com/advisories/26670 https://exchange.xforce.ibmcloud.com/vulnerabilities/39004 http://support.quickbooks.intuit.com/support/qbupdate2007/Default.aspx https://www.exploit-db.com/exploits/4825 http://www.intuit.com/support/security/http://www.securityfocus.com/bid/26815 http://www.vantagelinguistics.com/answerworks/release/http://www.vupen.com/english/advisories/2007/4194 http://www.vupen.com/english/advisories/2007/4195