CVE-2013-7246

Published: Jan 30, 2014Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows remote attackers to execute arbitrary code via a long string, as exploited in the wild in January 2014.

Affected (2)

Products: Daum Communications: Daumgame Activex Control

Daum Communications

1 product

Daumgame Activex Control

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Daum Communications Daumgame Activex Control	Version 1.1.0.4
Daum Communications Daumgame Activex Control	Version 1.1.0.5

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

http://blog.spiderlabs.com/2014/01/daumgame-activex-0day.html

Source: cve@mitre.org

Exploit

http://packetstormsecurity.com/files/124886

Source: cve@mitre.org

Exploit

http://seclists.org/fulldisclosure/2014/Jan/132

Source: cve@mitre.org

http://www.exploit-db.com/exploits/31179

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/90588

Source: cve@mitre.org

https://www.trustwave.com/spiderlabs/advisories/TWSL2014-002.txt

Source: cve@mitre.org

Exploit

http://blog.spiderlabs.com/2014/01/daumgame-activex-0day.html