- Description
- Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the (1) DebugMsgLog or (2) DoFileProperties methods.
- Source
- cve@mitre.org
- NVD status
- Analyzed
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
- nvd@nist.gov
- CWE-119
- Hype score
- Not currently trending
- Comment
- -
- Impact
- Failed exploit attempts will likely result in denial-of-service condition.
- Solution
- Failed exploit attempts will likely result in denial-of-service condition.
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:zenturi:zenturi_programchecker:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9628881E-9FAF-48DC-BC73-B1E4BBEF5ADC"
}
],
"operator": "OR"
}
]
}
]