QwikSec

Security Database

CVE

CWE

Training

CVE-2007-6387

Published: Dec 15, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics AnswerWorks, and Intuit Clearly Bookkeeping, ProSeries, QuickBooks, Quicken, QuickTax, and TurboTax, allow remote attackers to execute arbitrary code via long arguments to the (1) GetHistory, (2) GetSeedQuery, (3) SetSeedQuery, and possibly other methods. NOTE: some of these details are obtained from third party information.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.vantagelinguistics.com/answerworks/release/

x_refsource_CONFIRM

vdb-entry

x_refsource_VUPEN

exploit

x_refsource_EXPLOIT-DB

http://support.quickbooks.intuit.com/support/qbupdate2007/Default.aspx

x_refsource_MISC

third-party-advisory

x_refsource_SECUNIA

http://www.intuit.com/support/security/

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

vantage-answerworks-bo(39004)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.