Vulnerabilities > CVE-2008-7053 - Resource Management Errors vulnerability in Logmein Ractrl.Dll
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash) by setting the fgcolor and bgcolor properties to certain long values that trigger memory corruption.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Common Weakness Enumeration (CWE)
Exploit-Db
| description | LogMeIn Remote Access Utility ActiveX Memory Corruption DoS. CVE-2008-7053. Dos exploit for windows platform |
| file | exploits/windows/dos/6326.html |
| id | EDB-ID:6326 |
| last seen | 2016-01-31 |
| modified | 2008-08-29 |
| platform | windows |
| port | |
| published | 2008-08-29 |
| reporter | YAG KOHHA |
| source | https://www.exploit-db.com/download/6326/ |
| title | LogMeIn Remote Access Utility ActiveX Memory Corruption DoS |
| type | dos |
Statements
| contributor | LogMeIn |
| lastmodified | 2014-06-18 |
| organization | LogMeIn |
| statement | LogMeIn is aware of the CVE-2008-7053 issue and has resolved it on 9/3/2008. The fix is included in LogMeIn ActiveX Plugin since version 392-G2.” |
References
- http://packetstorm.foofus.com/0808-exploits/logmein-activex.txt
- http://packetstorm.foofus.com/0808-exploits/logmein-activex.txt
- http://www.securityfocus.com/bid/30923
- http://www.securityfocus.com/bid/30923
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44843
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44843
- https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7053
- https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7053
- https://www.exploit-db.com/exploits/6326
- https://www.exploit-db.com/exploits/6326