What’s Vulnerable › Vulnerabilities

CVE-2008-3430

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2008-07-31 · updated 2026-06-16
• Weakness: CWE-119

Description

Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0.907.1 in Eyeball MessengerSDK, as used in products such as SiOL Komunikator 1.3, allows remote attackers to execute arbitrary code via a large argument supplied to the BGColor method. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer.

Affected products

• Eyeball Networks Eyeball Messenger Sdk: 5.0.907.1

References

• http://packetstormsecurity.org/0807-exploits/siol-overflow.txt
• http://www.securityfocus.com/bid/30424
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44111
• http://packetstormsecurity.org/0807-exploits/siol-overflow.txt
• http://www.securityfocus.com/bid/30424
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44111

Get alerted when CVE-2008-3430 or the next vulnerability affects your stack