VULNERABILITY INTELLIGENCE
CVE-2007-2856
CVSS score9.3 HIGH
EPSS probability7.17%
CISA KEVNot currently listed
Published2007-05-24
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2855.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer