CVE-2007-2648

Clever Database Comparer 2.2 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function.

Exploits (1)

exploitdb WORKING POC VERIFIED

by shinnai · htmldoswindows

https://www.exploit-db.com/exploits/3921

View Code ZIP pw:eip

References (7)

[Exploit] http://www.shinnai.altervista.org/moaxb/20070514/clever.html

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/34261

[Various Sources] http://moaxb.blogspot.com/2007/05/moaxb-14-clever-database-comparer.html

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/1792

[Exploit] http://www.securityfocus.com/bid/23969

[Vendor Advisory] http://secunia.com/advisories/25227

[Third Party Advisory, VDB Entry] http://osvdb.org/36019

Scores

EPSS 0.0655

EPSS Percentile 91.2%

Details

Status published

Products (1)

clever_components/clever_database_comparer 2.2

Published May 14, 2007

Tracked Since Feb 18, 2026