Stack-based Buffer Overflow in IBM Access Support eGatherer ActiveX Control

CVE-2006-4221

Summary

The IBM Access Support eGatherer ActiveX control contains a stack-based buffer overflow that could allow remote attackers to execute arbitrary code. The vulnerability arises when handling excessively long filename parameters passed to the RunEgatherer method. This flaw, present in versions prior to 3.20.0284.0, poses significant security risks as it can be exploited by simply crafting a malicious filename.

References