CVEvulnerability
CVE-2007-1891
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-04-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Stack-based buffer overflow in the GetPrivateProfileSectionW function in Akamai Technologies Download Manager ActiveX Control (DownloadManagerV2.ocx) after 2.0.4.4 but before 2.2.1.0 allows remote attackers to execute arbitrary code, related to misinterpretation of the nSize parameter as a byte count instead of a wide character count.
Affected configurations
• akamai technologies download manager 2.2.0.0
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=514 Patch, Vendor Advisory
- http://secunia.com/advisories/24900 secunia.com
- http://www.kb.cert.org/vuls/id/120241 US Government Resource
- http://www.osvdb.org/34323 www.osvdb.org
- http://www.securityfocus.com/archive/1/465908/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23522 www.securityfocus.com
- http://www.securitytracker.com/id?1017925 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1415 www.vupen.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=514 Patch, Vendor Advisory
- http://secunia.com/advisories/24900 secunia.com
- http://www.kb.cert.org/vuls/id/120241 US Government Resource
- http://www.osvdb.org/34323 www.osvdb.org
- http://www.securityfocus.com/archive/1/465908/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23522 www.securityfocus.com
- http://www.securitytracker.com/id?1017925 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1415 www.vupen.com