vendor:
Whale Intelligent Application Gateway
by:
MC
7.5
CVSS
HIGH
Stack Buffer Overflow
119
CWE
Product Name: Whale Intelligent Application Gateway
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE: CVE-2007-2238
CPE:
Platforms Tested: Windows XP SP0-SP3 / Windows Vista / IE 6.0 SP0-SP2 / IE 7
Unknown
Microsoft Whale Intelligent Application Gateway ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in Microsoft Whale Intelligent Application Gateway Whale Client. When sending an overly long string to CheckForUpdates() method of WhlMgr.dll (3.1.502.64) an attacker may be able to execute arbitrary code.
Mitigation:
Unknown