CVE-2007-4466

EA SnoopyCtrl < - RCE

Title source: llm

Description

Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attackers to execute arbitrary code via unspecified methods and parameters.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16609

View Code ZIP pw:eip

metasploit WORKING POC NORMAL

by MC · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ea_checkrequirements.rb

View Code ZIP pw:eip

References (6)

[Vendor Advisory] http://secunia.com/advisories/27143

[US Government Resource] http://www.kb.cert.org/vuls/id/179281

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/37020

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/25970

[Third Party Advisory, VDB Entry] http://osvdb.org/37723

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/3415

Scores

EPSS 0.7451

EPSS Percentile 98.9%

Details

CWE

CWE-119 CWE-94

Status published

Products (1)

electronic_arts/snoopyctrl

Published Oct 09, 2007

Tracked Since Feb 18, 2026