CVE-2007-4943

Published: Sep 18, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected (1)

Products: Baofeng: Storm

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Baofeng Storm	Up to 2.8

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (4)

http://www.securityfocus.com/bid/29274

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3111

Source: cve@mitre.org

http://www.securityfocus.com/bid/29274

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/3111

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.