← Database

CVE-2007-2938

CRITICAL CVSS: 10.0 Published: 2007-05-31 Modified: 2026-06-16

Description

Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to the (1) Send485CMD method, and possibly the (2) SetLoginID, (3) AddSite, (4) SetScreen, and (5) SetVideoServer methods.

Affected Platforms

Microsoft Internet ExplorerHoneywell Ademco Atnbaseloader100 Module

Weakness Type

NVD-CWE-Other

References