What is CVE-2007-2238?

CVE-2007-2238 is a vulnerability in N/a. Published 2009-04-16.

Is CVE-2007-2238 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2007-2238

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long argumen…

EPSS: 0.765 (99.0th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

rapid7/metasploit-framework

References

VU#789121 (x_refsource_CERT-VN, third-party-advisory)
ADV-2009-1061 (vdb-entry, x_refsource_VUPEN)
34725 (x_refsource_SECUNIA, third-party-advisory)
34532 (vdb-entry, x_refsource_BID)
iag-activex-bo(49888) (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2007-2238?: CVE-2007-2238 is a vulnerability in N/a. Published 2009-04-16.
Is CVE-2007-2238 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.