Stack-based Buffer Overflow in SonicWall SSL-VPN NetExtender ActiveX Control
CVE-2007-5603
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 37%
What is CVE-2007-5603?
A stack-based buffer overflow vulnerability exists in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control, specifically in the handling of the 'AddRouteEntry' method. This flaw affects versions prior to 2.1.0.51 and 2.5.x versions before 2.5.0.56, allowing remote attackers to execute arbitrary code by sending a specially crafted string as an argument to the method. Exploitation of this vulnerability could lead to unauthorized actions and potential system compromise.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.