Buffer overflow in Commax Co., Ltd. Webviewer Activex Control
CVE-2021-47719
COMMAX WebViewer ActiveX Control 2.1.4.5 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long string arrays through multiple functions. Attackers can exploit boundary errors in Commax_WebViewer.ocx to cause buffer overflow conditions and potentially gain code execution.
Vulnerability class: Buffer Overflow
EPSS: 0.004 (35.6th percentile) — read the EPSS interpretation.
Affected products
- Commax Co., Ltd. Webviewer Activex Control — versions 2.1.4.5
Weakness classification (CWE)
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (third-party-advisory)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (third-party-advisory)