Description
Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control (DanskeSikker.ocx) 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function.
References
- 20090416 Secunia Research: Danske Bank e-Sec Control Module Error Logging Buffer Overflow mailing-list
- danske-esec-activex-bo(49903) vdb-entry
- 29635 third-party-advisory
- 34549 vdb-entry
- 53715 vdb-entry
- http://secunia.com/secunia_research/2008-17/
- ADV-2009-1047 vdb-entry