QwikSec

Security Database

CVE

CWE

Training

CVE-2010-0679

Published: Feb 22, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow remote attackers to execute arbitrary code via a large number of white space characters in the filename argument to the (1) SaveasMolFile and (2) ReadMolFile methods.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://packetstormsecurity.org/1002-exploits/hyleoschemview-heap.rb.txt

x_refsource_MISC

third-party-advisory

x_refsource_SECUNIA

http://www.security-assessment.com/files/advisories/2010-02-11_ChemviewX_Activex.pdf

x_refsource_MISC

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_OSVDB

http://packetstormsecurity.org/1002-advisories/chemviewx-overflow.txt

x_refsource_MISC

exploit

x_refsource_EXPLOIT-DB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.