Vulnerability Details CVE-2007-3071
Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSellerate SDK allows user-assisted remote attackers to execute arbitrary code via a long first argument.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.063
EPSS Ranking 90.5%
CVSS Severity
CVSS v2 Score 9.3
References
- http://osvdb.org/38803
- http://www.securityfocus.com/bid/24300
- http://www.shinnai.altervista.org/exploits/esellerate.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35003
- http://osvdb.org/38803
- http://www.securityfocus.com/bid/24300
- http://www.shinnai.altervista.org/exploits/esellerate.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35003
Products affected by CVE-2007-3071
-
cpe:2.3:a:digital_river:esellerate_sdk:3.6.5.0