CVEvulnerability

CVE-2007-6387

9.3 HIGH Published 2007-12-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-12-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics AnswerWorks, and Intuit Clearly Bookkeeping, ProSeries, QuickBooks, Quicken, QuickTax, and TurboTax, allow remote attackers to execute arbitrary code via long arguments to the (1) GetHistory, (2) GetSeedQuery, (3) SetSeedQuery, and possibly other methods. NOTE: some of these details are obtained from third party information.

Affected configurations

• intuit bookkeeping • intuit proseries • intuit quickbooks • intuit quicken • intuit quicktax • intuit turbo tax • microsoft activex 4.0.0.42 • vantage linquistics answerworks

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References