CVE-2007-2987

Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the (1) DebugMsgLog or (2) DoFileProperties methods.

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

33.85% chance of exploitation in the next 30 days, 98th percentile

Published

2007-06-01

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/zenturiprogramch…

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/16540
• https://www.exploit-db.com/exploits/4214
• https://www.exploit-db.com/exploits/4021

Security advisories

• http://secunia.com/advisories/25473
• http://www.vupen.com/english/advisories/2007/1977
• http://www.kb.cert.org/vuls/id/603529
• http://www.securityfocus.com/bid/24217
• http://www.securityfocus.com/bid/24274

References

• CVE Record
• NVD entry