Intrusion PreventionDart.Zip.Compression.DartZip.DLL.ActiveX.Control.Access
Description
This indicates a vulnerability in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3. The vulnerability is caused by a buffer overflow in the QuickZip method. It allows remote attackers to cause a denial of service or execute arbitrary code in the context of the application using the ActiveX control.
Affected Products
Dart Dart Communications PowerTCP Service Control 3.1.3.3
Impact
System compromise, remote code execution.
Recommended Actions
Currently we are not aware of any official supplied fix for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 14738 |
| Created | Jul 04, 2007 |
| Updated | Nov 03, 2021 |
| Risk |
|
| CVE ID | CVE-2007-2856 |
| Exploit Prediction Score | 24.7% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |