CVE-2007-6387

Currently unrated

Key Information:

Vendor
Microsoft
Status
Activex
Bookkeeping
Quicktax
Proseries
Vendor
CVE Published:
15 December 2007

Summary

Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics AnswerWorks, and Intuit Clearly Bookkeeping, ProSeries, QuickBooks, Quicken, QuickTax, and TurboTax, allow remote attackers to execute arbitrary code via long arguments to the (1) GetHistory, (2) GetSeedQuery, (3) SetSeedQuery, and possibly other methods. NOTE: some of these details are obtained from third party information.

References

http://www.vantagelinguistics.com/answerworks/release/
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/4194
vdb-entryx_refsource_VUPEN
https://www.exploit-db.com/exploits/4825
exploitx_refsource_EXPLOIT-DB

EPSS Score

51% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.