vendor:
E-Class SSL-VPN ActiveX Control
by:
NSO-Advisory
7,5
CVSS
HIGH
format string overflow
134
CWE
Product Name: E-Class SSL-VPN ActiveX Control
Affected Version From: 5.9.0.0
Affected Version To: 5.9.0.0
Patch Exists: YES
Related CWE: CVE-2010-0478
CPE: a:sonicwall:e-class_ssl-vpn_activex_control
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2010
SonicWALL E-Class SSL-VPN ActiveX Control format string overflow
A format string vulnerability exists in SonicWALL E-Class SSL-VPN ActiveX Control versions 5.9.0.0 and earlier. An attacker can exploit this vulnerability by sending a specially crafted format string to the vulnerable application. This can result in arbitrary code execution on the affected system.
Mitigation:
Upgrade to the latest version of SonicWALL E-Class SSL-VPN ActiveX Control
