CVE-2015-5624

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-09-07 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in the ExecCall method in c2lv6.ocx in the FreeBit ELPhoneBtnV6 ActiveX control allows remote attackers to execute arbitrary code via a crafted HTML document, related to the discontinued "Click to Live" service.

Affected products

Freebit Elphonebtnv6 Activex Control: all versions

References

http://jvn.jp/en/jp/JVN62078684/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000127
http://jvn.jp/en/jp/JVN62078684/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000127

Get alerted when CVE-2015-5624 or the next vulnerability affects your stack