CVE:CVE-2007-5217
CNNVD:CNNVD-200710-066
Altnet Download Manager 4.0.0.6中的adm4.dll的ADM4 ActiveX控件存在栈缓冲区溢出,用于(1) Kazaa 3.2.7和(2) Grokster, 远程攻击者可以借助安装方法的一个超长的参数执行任意代码。
solution:Upgrade altnet altnet_download_manager to a higher version than 4.0.0.6,and avoid the version 4.0.0.6; Upgrade grokster grokster to a higher version than 2.6,and avoid the version 2.6; Upgrade kazaa kazaa_media_desktop to a higher version than 3.2.7,and avoid the version 3.2.7