Vulnerability Details CVE-2008-3430
Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0.907.1 in Eyeball MessengerSDK, as used in products such as SiOL Komunikator 1.3, allows remote attackers to execute arbitrary code via a large argument supplied to the BGColor method. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.056
EPSS Ranking 90.0%
CVSS Severity
CVSS v2 Score 9.3
References
- http://packetstormsecurity.org/0807-exploits/siol-overflow.txt
- http://www.securityfocus.com/bid/30424
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44111
- http://packetstormsecurity.org/0807-exploits/siol-overflow.txt
- http://www.securityfocus.com/bid/30424
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44111
Products affected by CVE-2008-3430
-
cpe:2.3:a:eyeball_networks:eyeball_messenger_sdk:5.0.907.1