CVE-2007-5217

Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) Kazaa 3.2.7 and (2) Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2007-10-05

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Altnet Download Manager (Altnet)
• Grokster (Grokster)
• Kazaa Media Desktop (Kazaa)

References

• http://osvdb.org/37785
• http://osvdb.org/38435
• http://secunia.com/advisories/26970
• http://secunia.com/advisories/26972
• http://www.securityfocus.com/bid/25903
• http://www.vupen.com/english/advisories/2007/3335
• http://www.vupen.com/english/advisories/2007/3336
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36929