CVE-2015-7918 in ProClimainfo

Summary

Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

10/22/2015

Disclosure

12/15/2015

CPE

ready

CVSS

5.9

EPSS

0.11179

Activities

Very Low

Sources

Do you know our Splunk app?

Download it now for free!