CVE-2015-2095 – Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.

4 years ago

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2095

Reference (s):

BID:73222
URL: http://www.securityfocus.com/bid/73222
http://www.zerodayinitiative.com/advisories/ZDI-15-070/