Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM eGatherer eGatherer控件的RunEgatherer函数缓冲区溢出漏洞
Vulnerability Description
IBM eGatherer控件是IBM用于自动维护PC的解决方案。 eGatherer控件的RunEgatherer函数实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 这个函数会接受eGatherer日志输出的指定文件名。即使已经为输出设置了合法的路径参数，ActiveX仍会向SystemDrive写入日志文件。如果攻击者能够发送超长的参数的话，就会触发栈溢出漏洞，导致执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A