Multiple stack-based buffer overflows in the Sienzo Digital Music Mentor (DMM) 2.6.0.4 ActiveX control (DSKernel2.dll) allow remote attackers to execute arbitrary code via a long argument to the (1) LockModules or (2) UnlockModule function.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Digital_music_mentor | Sienzo | 2.6.0.4 (including) | 2.6.0.4 (including) |
References
- http://moaxb.blogspot.com/2007_05_06_archive.html
- http://osvdb.org/34338
- http://www.securityfocus.com/bid/23838
- http://www.shinnai.altervista.org/moaxb/20070506/sienzo.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34120
- http://moaxb.blogspot.com/2007_05_06_archive.html
- http://osvdb.org/34338
- http://www.securityfocus.com/bid/23838
- http://www.shinnai.altervista.org/moaxb/20070506/sienzo.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34120