CVE-2007-2238

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 45.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-04-16 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2) UpdateComponents methods.

Affected products

Microsoft Intelligent Application Gateway 2007: through 3.7

References

http://secunia.com/advisories/34725
http://www.kb.cert.org/vuls/id/789121
http://www.securityfocus.com/bid/34532
http://www.vupen.com/english/advisories/2009/1061
https://exchange.xforce.ibmcloud.com/vulnerabilities/49888
http://secunia.com/advisories/34725
http://www.kb.cert.org/vuls/id/789121
http://www.securityfocus.com/bid/34532
http://www.vupen.com/english/advisories/2009/1061
https://exchange.xforce.ibmcloud.com/vulnerabilities/49888

Get alerted when CVE-2007-2238 or the next vulnerability affects your stack