CVE-2015-2095

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2015-03-09

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Edvr Manager (Webgateinc)

References

• http://www.securityfocus.com/bid/73222
• http://www.zerodayinitiative.com/advisories/ZDI-15-070/