CVE-2008-7053 - LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial

CVE-2008-7053

Summary

LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash) by setting the fgcolor and bgcolor properties to certain long values that trigger memory corruption.

References

Vulnerable Configurations

cpe:2.3:a:logmein:ractrl.dll:*:*:*:*:*:*:*:*
cpe:2.3:a:logmein:ractrl.dll:*:*:*:*:*:*:*:*

CVSS

Base:	9.3 (as of 29-09-2017 - 01:33)
Impact:
Exploitability:

CWE

CWE-399

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:M/Au:N/C:C/I:C/A:C

refmap via4

bid	30923
confirm	https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7053
exploit-db	6326
misc	http://packetstorm.foofus.com/0808-exploits/logmein-activex.txt
xf	logmein-ractrl-bo(44843)

statements via4

contributor	LogMeIn
lastmodified	2014-06-18
organization	LogMeIn
statement	LogMeIn is aware of the CVE-2008-7053 issue and has resolved it on 9/3/2008. The fix is included in LogMeIn ActiveX Plugin since version 392-G2.”

Last major update

29-09-2017 - 01:33

Published

24-08-2009 - 19:30

Last modified

29-09-2017 - 01:33