Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2007-5602 | First vendor Publication | 2008-02-04 |
| Vendor | Cve | Last vendor Modification | 2011-03-08 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 10 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execute arbitrary code via unspecified vectors to the (1) svocx.ocx ActiveX control or the (2) npsview.dll plugin for Mozilla and Firefox. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5602 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 42837 | SwiftView Viewer Plug-in for Mozilla Browsers (npsview.dll) Unspecified Overf... A remote overflow exists in eLynx SwiftView Viewer. The SwiftView browser plugin for Mozilla fails proper bounds checking resulting in a stack based buffer overflow. With a specially crafted HTML page, an attacker can exploit the browser plugin to achieve remote code execution. |
| 42836 | SwiftView Viewer ActiveX (svocx.ocx) Unspecified Overflows |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | SwiftView ActiveX clsid unicode access RuleID : 13424 - Revision : 6 - Type : WEB-ACTIVEX |
| 2014-01-10 | SwiftView ActiveX clsid access RuleID : 13423 - Revision : 11 - Type : BROWSER-PLUGINS |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2008-01-31 | Name : The remote Windows host contains a browser enhancement that is affected by a ... File : swiftview_8_3_5_overflow.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2020-05-23 00:20:39 |
|
| 2016-06-28 17:00:45 |
|
| 2016-04-26 16:44:22 |
|
| 2014-02-17 10:42:17 |
|
| 2014-01-19 21:24:33 |
|
| 2013-05-11 10:39:58 |
|
