Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2095
Reference (s):
- BID:73222
- URL: http://www.securityfocus.com/bid/73222
- http://www.zerodayinitiative.com/advisories/ZDI-15-070/