CVE-2007-4943

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-18 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Baofeng Storm: through 2.8

References

http://www.securityfocus.com/bid/29274
http://www.vupen.com/english/advisories/2007/3111
http://www.securityfocus.com/bid/29274
http://www.vupen.com/english/advisories/2007/3111

Get alerted when CVE-2007-4943 or the next vulnerability affects your stack