Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0.907.1 in Eyeball MessengerSDK, as used in products such as SiOL Komunikator 1.3, allows remote attackers to execute arbitrary code via a large argument supplied to the BGColor method. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer.

References

• https://nvd.nist.gov/vuln/detail/CVE-2008-3430
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44111
• http://packetstormsecurity.org/0807-exploits/siol-overflow.txt
• http://www.securityfocus.com/bid/30424