Description
Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote attackers to execute arbitrary code via a long pszUserID argument.
References
- skcommax-downloadcertificate-bo(33245) vdb-entry
- 23149 vdb-entry
- ADV-2007-1114 vdb-entry
- 20070327 SignKorea's ActiveX Buffer Overflow Vulnerability mailing-list
- 24587 third-party-advisory