Vulnerabilities

TI-2018-03761 CVE-2018-5202 · GHSA-jwp4-rhw6-7g6m

SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker…

LOW 37

SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01548 Published 2018-12-21 No fix listed

TI-2007-01877 CVE-2007-1955 · GHSA-xv9q-3j6j-5pc2

Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module…

MEDIUM 50

Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2 allow remote attackers to execute arbitrary code via a long string in unspecified arguments to the (1) DownloadCert, (2) Decr…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04603 Published 2007-04-11 No fix listed

TI-2007-01658 CVE-2007-1722 · GHSA-q3x4-ghjp-8xh2

Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX…

MEDIUM 49

Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote attackers to execute arbitrary code via a long pszUserID argument.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03434 Published 2007-03-28 No fix listed

Vulnerabilities

Filters

SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker…

Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module…

Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX…