CVE-2007-2938: Buffer Overflow

Published May 31, 2007

Updated

Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to the (1) Send485CMD method, and possibly the (2) SetLoginID, (3) AddSite, (4) SetScreen, and (5) SetVideoServer methods.

Affected Software

2 affected components

Honeywell Ademco Atnbaseloader100 Module=5.4.0.6

Microsoft Internet Explorer=6

Event History

May 31, 2007

CVE Published

12:30 AM

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2938?

CVE-2007-2938 is classified as a critical vulnerability due to its potential for remote code execution.

How can I mitigate CVE-2007-2938?

To mitigate CVE-2007-2938, users should upgrade to a non-vulnerable version of the Honeywell Ademco ATNBaseLoader100 Module or use an alternative browser instead of Internet Explorer 6.

What specific software is affected by CVE-2007-2938?

CVE-2007-2938 affects the Honeywell Ademco ATNBaseLoader100 Module version 5.4.0.6 and Internet Explorer 6.

Can CVE-2007-2938 be exploited remotely?

Yes, CVE-2007-2938 can be exploited remotely by attackers to execute arbitrary code.

What types of attacks are possible with CVE-2007-2938?

Exploitation of CVE-2007-2938 may allow attackers to execute arbitrary commands leading to a complete system compromise.