{"id":"CVE-2007-2987","aliases":["EUVD-2007-2979","GHSA-5jh3-6rj9-m2g2"],"status":"published","title":"Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker...","description":"Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the (1) DebugMsgLog or (2) DoFileProperties methods.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.33847,"percentile":0.98401,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2007-06-01T10:00:00Z","modified":"2026-06-16T22:40:50Z","exploits":[{"source":"exploitdb","id":"EDB-16540","title":"Zenturi ProgramChecker - ActiveX Control Arbitrary File Download (Metasploit)","type":"remote","platform":"windows","date":"2010-11-24","verified":true,"url":"https://www.exploit-db.com/exploits/16540"},{"source":"exploitdb","id":"EDB-4021","title":"Zenturi ProgramChecker - ActiveX 'sasatl.dll' Remote Buffer Overflow","type":"remote","platform":"windows","date":"2007-06-01","verified":true,"url":"https://www.exploit-db.com/exploits/4021"},{"source":"exploitdb","id":"EDB-4214","title":"Zenturi NixonMyPrograms Class 'sasatl.dll 1.5.0.531' - Remote Buffer Overflow","type":"remote","platform":"windows","date":"2007-07-23","verified":true,"url":"https://www.exploit-db.com/exploits/4214"},{"source":"metasploit","id":"exploit/windows/browser/zenturiprogramchecker_unsafe","title":"Zenturi ProgramChecker ActiveX Control Arbitrary File Download","type":"exploit","platform":"Windows","date":"2007-05-29","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/browser/zenturiprogramchecker_unsafe"}],"products":[{"vendor":"zenturi","product":"zenturi_programchecker"}],"references":[{"url":"http://www.securityfocus.com/bid/24217","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://osvdb.org/36715","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/bid/24274","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/1977","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/603529","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://secunia.com/advisories/25473","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-2987"},{"url":"https://github.com/advisories/GHSA-5jh3-6rj9-m2g2"}],"sources":{"cve":[{"id":"CVE-2007-2987","description":"Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the (1) DebugMsgLog or (2) DoFileProperties methods.","status":"published","published":"2007-06-01T10:00:00Z","modified":"2024-08-07T13:57:54.904Z","updated_at":"2026-11-02T13:32:34.372976Z"}],"euvd":[{"id":"EUVD-2007-2979","description":"Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the (1) DebugMsgLog or (2) DoFileProperties methods.","status":"published","published":"2007-06-01T10:00:00Z","modified":"2024-08-07T13:57:54Z","updated_at":"2026-11-03T01:38:18.546691Z"}],"ghsa":[{"id":"GHSA-5jh3-6rj9-m2g2","title":"Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker...","description":"Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the (1) DebugMsgLog or (2) DoFileProperties methods.","status":"published","published":"2022-05-01T18:09:21Z","modified":"2023-01-31T05:03:47Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:48:32.911406Z"}],"nvd":[{"id":"CVE-2007-2987","description":"Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the (1) DebugMsgLog or (2) DoFileProperties methods.","status":"published","published":"2007-06-01T10:30:00Z","modified":"2026-06-16T22:40:50.237Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:16.479378Z"}]}}