CVE-2007-4943

Baofeng Storm < 2.8 - Remote Code Execution via sparser.dll ActiveX Control

Title source: llm
STIX 2.1

Description

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/29274
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3111

Scores

EPSS 0.0331
EPSS Percentile 87.2%

Details

CWE
CWE-119
Status published
Products (1)
baofeng/storm < 2.8
Published Sep 18, 2007
Tracked Since Feb 18, 2026