CVE:CVE-2007-2917
CNNVD:CNNVD-200705-580
Authentium Command Antivirus是一款杀毒软件。
Authentium Command Antivirus的odapi.dll库所提供的多个ActiveX控件存在缓冲区溢出漏洞，如果用户受骗访问了恶意的web站点并向有漏洞的控件传送了超长参数的话，就可能触发这些溢出，导致执行任意指令。
solution:Upgrade authentium command_antivirus to a higher version than 4.93.1,4.93.2,4.93.3,4.93.4,4.93.5,4.93.6,4.93.7,and avoid the version 4.93.1,4.93.2,4.93.3,4.93.4,4.93.5,4.93.6,4.93.7