Detections
Analytics
Learn2 STRunner ActiveX Control Multiple Buffer Overflow Vulnerabilities
high Nessus Plugin ID 31352
Synopsis
The remote Windows host has an ActiveX control that is susceptible to multiple buffer overflow attacks.Description
The Learn2 Corporation's STRunner ActiveX control, used with various online tutorials, is installed on the remote host. It reportedly is affected by multiple and as-yet unspecified stack-based buffer overflows. If a remote attacker can trick a user on the affected host into visiting a specially crafted web page, this issue could be leveragedto execute arbitrary code on the affected host subject to the user's privileges.Solution
Unknown at this time.Plugin Details
Severity: High
ID: 31352
File Name: learn2_strunner_overflows.nasl
Version: 1.14
Type: local
Agent: windows
Family: Windows
Published: 3/5/2008
Updated: 7/12/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.2
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
Required KB Items: SMB/Registry/Enumerated
Exploit Ease: No known exploits are available
Reference Information
CVE: CVE-2007-6252
BID: 28058