CVE-2010-2305 – Sygate Personal Firewall 5.6 build 2808 - ActiveX with DEP Bypass

https://notcve.org/view.php?id=CVE-2010-2305

Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method. Desbordamiento de búfer en el control ActiveX SSHelper.dll para Symantec Sygate Personal Firewall v5.6 build 280, permite a atacantes remotos ejecutar código de su elección a través de un argumento largo al método SetRegString. • https://www.exploit-db.com/exploits/13834 http://osvdb.org/65539 http://www.corelan.be:8800/index.php/forum/security-advisories/10-050-sygate-personal-firewall-5-6-build-2808-activex http://www.exploit-db.com/exploits/13834 https://exchange.xforce.ibmcloud.com/vulnerabilities/59408 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •