CVE-2007-2983

Multiple buffer overflows in the British Telecommunications Consumer webhelper ActiveX control before 2.0.0.8 in btwebcontrol.dll allow remote attackers to execute arbitrary code via unspecified vectors.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://osvdb.org/40771
http://secunia.com/advisories/25472	Vendor Advisory
http://www.kb.cert.org/vuls/id/686249	US Government Resource
http://www.securityfocus.com/bid/24219	Exploit
http://www.vupen.com/english/advisories/2007/1979
https://exchange.xforce.ibmcloud.com/vulnerabilities/34589
http://osvdb.org/40771
http://secunia.com/advisories/25472	Vendor Advisory
http://www.kb.cert.org/vuls/id/686249	US Government Resource
http://www.securityfocus.com/bid/24219	Exploit
http://www.vupen.com/english/advisories/2007/1979
https://exchange.xforce.ibmcloud.com/vulnerabilities/34589

Configurations

Configuration 1 (hide)

cpe:2.3:a:btglobalservices:bt_consumer_webhelper:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:32

Type	Values Removed	Values Added
References	~~() http://osvdb.org/40771 -~~	() http://osvdb.org/40771 -
References	~~() http://secunia.com/advisories/25472 - Vendor Advisory~~	() http://secunia.com/advisories/25472 - Vendor Advisory
References	~~() http://www.kb.cert.org/vuls/id/686249 - US Government Resource~~	() http://www.kb.cert.org/vuls/id/686249 - US Government Resource
References	~~() http://www.securityfocus.com/bid/24219 - Exploit~~	() http://www.securityfocus.com/bid/24219 - Exploit
References	~~() http://www.vupen.com/english/advisories/2007/1979 -~~	() http://www.vupen.com/english/advisories/2007/1979 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/34589 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/34589 -

Information

Published : 2007-10-25 18:46

Updated : 2024-11-21 00:32

NVD link : CVE-2007-2983

Mitre link : CVE-2007-2983

CVE.ORG link : CVE-2007-2983

JSON object : View

Products Affected

btglobalservices

bt_consumer_webhelper

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2007-2983", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-10-25T18:46:00.000", "references": [{"url": "http://osvdb.org/40771", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/25472", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/686249", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/24219", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/1979", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34589", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/40771", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/25472", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/686249", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/24219", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/1979", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34589", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in the British Telecommunications Consumer webhelper ActiveX control before 2.0.0.8 in btwebcontrol.dll allow remote attackers to execute arbitrary code via unspecified vectors."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer en el control ActiveX British Telecommunications Consumer webhelper anterior a 2.0.0.8 en btwebcontrol.dll permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante vectores no especificados."}], "lastModified": "2024-11-21T00:32:07.423", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:btglobalservices:bt_consumer_webhelper:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A8B8506-396D-4BBA-B7C7-5F186103C519", "versionEndIncluding": "2.0.0.7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}