CVE-2008-2745

Description

Stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) in Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code via a long parameter to the AnnoSaveToTiff method.

Affected products

• black_ice / annotation_software10.95 – 10.95

References

• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/1795/references
• EXPLOIThttps://www.exploit-db.com/exploits/5778
• EXPLOIThttps://www.exploit-db.com/exploits/5777
• VENDOR_ADVISORYhttp://secunia.com/advisories/30603
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/42982
• MISChttp://www.securityfocus.com/bid/29635