CVE-2007-3675 in Online Scannerinfo

Summary

Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control (kavwebscan.dll) in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via format string specifiers in "various string formatting functions," which trigger heap-based buffer overflows.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

07/10/2007

Disclosure

10/12/2007

Entries

1

CPE

ready

CVSS

10.0

EPSS

0.07663

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!