CVE-2007-2526

Published: May 8, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control (scvncctrl.dll) in the SmartCode VNC Manager 3.6 allows remote attackers to execute arbitrary code via a long argument.

Affected (1)

Products: Smartcode: Vnc Manager

Smartcode

1 product

Vnc Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Smartcode Vnc Manager	Version 3.6

References (16)

http://moaxb.blogspot.com/2007/05/moaxb-08-smartcode-vnc-manager-36.html

Source: cve@mitre.org

http://osvdb.org/34340

Source: cve@mitre.org

http://secunia.com/advisories/25203

Source: cve@mitre.org

Vendor Advisory

http://www.exploit-db.com/exploits/3873

Source: cve@mitre.org

http://www.securityfocus.com/bid/23869

Source: cve@mitre.org

Exploit

http://www.shinnai.altervista.org/moaxb/20070508/scvncctrl.txt

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1704

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34149

Source: cve@mitre.org

http://moaxb.blogspot.com/2007/05/moaxb-08-smartcode-vnc-manager-36.html