CVE-2007-2918

Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) StarClient.dll, (4) ComLink in (c) uicomlink.dll, and (5) WebCamXMP in (d) wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a denial of service (browser crash) and execute arbitrary code via unspecified vectors.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

34.06% chance of exploitation in the next 30 days, 98th percentile

Published

2007-06-01

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/logitechvideocal…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16511

References

• CVE Record
• NVD entry

Related

• CVE-2007-2916
• CVE-2007-2919
• CVE-2007-2908
• CVE-2007-2926
• CVE-2007-2903
• CVE-2007-2930