Description
COMMAX WebViewer ActiveX Control 2.1.4.5 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long string arrays through multiple functions. Attackers can exploit boundary errors in Commax_WebViewer.ocx to cause buffer overflow conditions and potentially gain code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| COMMAX | COMMAX WebViewer ActiveX Control | 2.1.4.5 | — |
References
- ExploitDB-50231 exploit
- Zero Science Lab Disclosure (ZSL-2021-5663) third-party-advisory
- Reference product
- VulnCheck Advisory: CNC_Ctrl DllUnregisterServer f5501 Access Violation third-party-advisory