CVE-2008-3480

Stack-based buffer overflow in the Anzio Web Print Object (WePO) ActiveX control 3.2.19 and 3.2.24, as used in Anzio Print Wizard, allows remote attackers to execute arbitrary code via a long mainurl parameter.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2008-08-29

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Print Wizard (Anzio)
• Web Print Object (Anzio)

References

• http://secunia.com/advisories/31554
• http://securityreason.com/securityalert/4197
• http://www.coresecurity.com/content/anzio-web-print-object-buffer-overflow
• http://www.securityfocus.com/archive/1/495630/100/0/threaded
• http://www.securityfocus.com/bid/30545
• http://www.vupen.com/english/advisories/2008/2417
• https://www.exploit-db.com/exploits/6278