CVE-2007-5602

Published Feb 5, 2008

Last updated 11 days ago

Overview

Description: Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execute arbitrary code via unspecified vectors to the (1) svocx.ocx ActiveX control or the (2) npsview.dll plugin for Mozilla and Firefox.
Source: cret@cert.org
NVD status: Deferred

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-119

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:swiftview:viewer:*:*:windows:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C6B0A3D4-80F6-4D0C-99B8-A2BF92552E6F",
            "versionEndIncluding": "8.3.4"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References