CVE-2008-0634 – Sejoong Namo ActiveSquare 6 - 'NamoInstaller.dll' ActiveX Buffer Overflow

https://notcve.org/view.php?id=CVE-2008-0634

Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6, allows remote attackers to execute arbitrary code via a long argument to the Install method, a different vulnerability than CVE-2008-0551. Desbordamiento de búfer en el control ActiveX NamoInstaller.NamoInstall.1 en NamoInstaller.dll 3.0.0.1, del modo que se usa en Sejoong Namo ActiveSquare6. Permite a atacantes remotos ejecutar código de su elección a través de un argumento largo al método Install, una vulnerabilidad distinta a CVE-2008-0551. • https://www.exploit-db.com/exploits/5045 http://secunia.com/advisories/28649 https://exchange.xforce.ibmcloud.com/vulnerabilities/40199 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •