CVE-2007-2938

Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to the (1) Send485CMD method, and possibly the (2) SetLoginID, (3) AddSite, (4) SetScreen, and (5) SetVideoServer methods.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

40.51% chance of exploitation in the next 30 days, 99th percentile

Published

2007-05-31

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/3993

References

• CVE Record
• NVD entry

Related

• CVE-2007-2937
• CVE-2007-2939
• CVE-2007-2936
• CVE-2007-2940
• CVE-2007-2935
• CVE-2007-2941