Stack-Based Buffer Overflows in Logitech VideoCall ActiveX Controls
CVE-2007-2918

Currently unrated

Key Information:

Vendor

Logitech

Status
Videocall
Vendor
CVE Published:
1 June 2007

What is CVE-2007-2918?

Multiple stack-based buffer overflow vulnerabilities exist in ActiveX controls associated with Logitech VideoCall, including issues in components such as vibecontrol.dll, StarClient.dll, and uicomlink.dll. Attackers can exploit these vulnerabilities through unspecified vectors to execute arbitrary code, potentially leading to a denial of service that crashes the browser. Users may be at risk if they utilize these components without proper security measures.

References

http://www.kb.cert.org/vuls/id/330289
third-party-advisoryx_refsource_CERT-VN
http://osvdb.org/36821
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/25514
third-party-advisoryx_refsource_SECUNIA

EPSS Score

34% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.