CVE-2007-1722

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-28 · updated 2026-06-16

Description

Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote attackers to execute arbitrary code via a long pszUserID argument.

Affected products

SIGNKOREA Skcommax Activex Control: 6.6.0.1_3280, 7.2.0.2

References

http://marc.info/?l=full-disclosure&m=117497124018827&w=2
http://secunia.com/advisories/24587
http://www.securityfocus.com/bid/23149
http://www.vupen.com/english/advisories/2007/1114
https://exchange.xforce.ibmcloud.com/vulnerabilities/33245
http://marc.info/?l=full-disclosure&m=117497124018827&w=2
http://secunia.com/advisories/24587
http://www.securityfocus.com/bid/23149
http://www.vupen.com/english/advisories/2007/1114
https://exchange.xforce.ibmcloud.com/vulnerabilities/33245

Get alerted when CVE-2007-1722 or the next vulnerability affects your stack