CVE-2007-2564: Buffer Overflow

Published May 9, 2007

Updated

Multiple stack-based buffer overflows in the Sienzo Digital Music Mentor (DMM) 2.6.0.4 ActiveX control (DSKernel2.dll) allow remote attackers to execute arbitrary code via a long argument to the (1) LockModules or (2) UnlockModule function.

Affected Software

1 affected component

Sienzo Digital Music Mentor=2.6.0.4

Event History

May 9, 2007

CVE Published

06:19 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2564?

CVE-2007-2564 has been classified as a high severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2007-2564?

To fix CVE-2007-2564, it is recommended to update or remove the affected Sienzo Digital Music Mentor software version 2.6.0.4.

What type of vulnerability is CVE-2007-2564?

CVE-2007-2564 is a stack-based buffer overflow vulnerability in the Sienzo Digital Music Mentor ActiveX control.

Who is affected by CVE-2007-2564?

Users of the Sienzo Digital Music Mentor version 2.6.0.4 are affected by CVE-2007-2564.

Can CVE-2007-2564 be exploited remotely?

Yes, CVE-2007-2564 can be exploited remotely by attackers sending specially crafted long arguments to specific functions.