Vantage Linguistics AnswerWorks 4 - API ActiveX Control Buffer Overflow

CVE编号

CVE-2007-6387

利用情况

暂无

补丁情况

N/A

披露时间

2007-12-15

漏洞描述

Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics AnswerWorks, and Intuit Clearly Bookkeeping, ProSeries, QuickBooks, Quicken, QuickTax, and TurboTax, allow remote attackers to execute arbitrary code via long arguments to the (1) GetHistory, (2) GetSeedQuery, (3) SetSeedQuery, and possibly other methods. NOTE: some of these details are obtained from third party information.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
http://secunia.com/advisories/26566
http://secunia.com/advisories/26670
http://support.quickbooks.intuit.com/support/qbupdate2007/Default.aspx
http://www.intuit.com/support/security/
http://www.securityfocus.com/bid/26815
http://www.vantagelinguistics.com/answerworks/release/
http://www.vupen.com/english/advisories/2007/4194
http://www.vupen.com/english/advisories/2007/4195
https://exchange.xforce.ibmcloud.com/vulnerabilities/39004
https://www.exploit-db.com/exploits/4825

受影响软件情况

#	类型	厂商	产品	版本	影响面
1
	运行在以下环境
	应用	intuit	bookkeeping	*	-
	运行在以下环境
	应用	intuit	proseries	*	-
	运行在以下环境
	应用	intuit	quickbooks	*	-
	运行在以下环境
	应用	intuit	quicken	*	-
	运行在以下环境
	应用	intuit	quicktax	*	-
	运行在以下环境
	应用	intuit	turbo_tax	*	-
	运行在以下环境
	应用	microsoft	activex	4.0.0.42	-
	运行在以下环境
	应用	vantage_linquistics	answerworks	*	-

CVSS3评分 9.3

• 攻击路径 网络
• 攻击复杂度 N/A
• 权限要求 无
• 影响范围 N/A
• 用户交互 需要
• 可用性 完全地
• 保密性 完全地
• 完整性 完全地

AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-ID	漏洞类型
CWE-119	内存缓冲区边界内操作的限制不恰当

Exp相关链接

• https://www.exploit-db.com/exploits/4825

- avd.aliyun.com