CVE-2007-6387
N/A
N/A
Summary
Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics AnswerWorks, and Intuit Clearly Bookkeeping, ProSeries, QuickBooks, Quicken, QuickTax, and TurboTax, allow remote attackers to execute arbitrary code via long arguments to the (1) GetHistory, (2) GetSeedQuery, (3) SetSeedQuery, and possibly other methods. NOTE: some of these details are obtained from third party information.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.vantagelinguistics.com/answerworks/release/
- http://www.vupen.com/english/advisories/2007/4194
- https://www.exploit-db.com/exploits/4825
- http://support.quickbooks.intuit.com/support/qbupdate2007/Default.aspx
- http://secunia.com/advisories/26566
- http://www.intuit.com/support/security/
- http://secunia.com/advisories/26670
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39004
- http://www.securityfocus.com/bid/26815
- http://www.vupen.com/english/advisories/2007/4195
References
- http://www.vantagelinguistics.com/answerworks/release/
- http://www.vupen.com/english/advisories/2007/4194
- https://www.exploit-db.com/exploits/4825
- http://support.quickbooks.intuit.com/support/qbupdate2007/Default.aspx
- http://secunia.com/advisories/26566
- http://www.intuit.com/support/security/
- http://secunia.com/advisories/26670
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39004
- http://www.securityfocus.com/bid/26815
- http://www.vupen.com/english/advisories/2007/4195
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.