Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSellerate SDK allows user-assisted remote attackers to execute arbitrary code via a long first argument.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Esellerate_sdk | Digital_river | 3.6.5.0 (including) | 3.6.5.0 (including) |
References
- http://osvdb.org/38803
- http://www.securityfocus.com/bid/24300
- http://www.shinnai.altervista.org/exploits/esellerate.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35003
- http://osvdb.org/38803
- http://www.securityfocus.com/bid/24300
- http://www.shinnai.altervista.org/exploits/esellerate.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35003