Back to CVE Browser

CVE-2008-1307

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1850%

EPSS Percentile33.84th

PublishedMar 12, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method.

Affected Platforms (CPE)

📦

Kingsoft

Antivirus Online Update Module

= 2007.12.29.29

References & Advisories

🔗 http://secunia.com/advisories/29204

🔗 http://www.securityfocus.com/bid/28172

🔗 http://www.vupen.com/english/advisories/2008/0857/references

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/41088

🔗 https://www.exploit-db.com/exploits/5225

🔗 http://secunia.com/advisories/29204

🔗 http://www.securityfocus.com/bid/28172

🔗 http://www.vupen.com/english/advisories/2008/0857/references

Related Vulnerabilities

CVE-2008-535310.0

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and...

CVE-2008-535510.0

The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 1...

CVE-2008-665110.0

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP c...

CVE-2008-461510.0

Unspecified vulnerability in i_utils.asp in PortalApp before 4.01a has unknown impact and attack vectors.