Heap-Based Buffer Overflow in KingSoft Antivirus Update Module
CVE-2008-1307

Currently unrated

Key Information:

Vendor

Kingsoft

Status
Antivirus Online Update Module
Vendor
CVE Published:
12 March 2008

What is CVE-2008-1307?

A heap-based buffer overflow vulnerability exists in the KUpdateObj2 Class ActiveX control within the UpdateOcx2.dll of KingSoft Antivirus Online Update Module version 2007.12.29.29. This flaw allows remote attackers to execute arbitrary code on affected systems by supplying a lengthy argument to the SetUninstallName method, potentially resulting in unauthorized access or manipulation of the target system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://secunia.com/advisories/29204
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/28172
vdb-entryx_refsource_BID
https://www.exploit-db.com/exploits/5225
exploitx_refsource_EXPLOIT-DB

EPSS Score

7% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.