CVE-2008-3430

Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0.907.1 in Eyeball MessengerSDK, as used in products such as SiOL Komunikator 1.3, allows remote attackers to execute arbitrary code via a large argument supplied to the BGColor method. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2008-07-31

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Eyeball Messenger Sdk (Eyeball Networks)

References

• http://packetstormsecurity.org/0807-exploits/siol-overflow.txt
• http://www.securityfocus.com/bid/30424
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44111