CVE-2007-5814

CVSS 9.3 - HIGH

Description

Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allow remote attackers to execute arbitrary code via a long (1) serverAddress, (2) sessionId, (3) clientIPLower, (4) clientIPHigher, (5) userName, (6) domainName, or (7) dnsSuffix Unicode property value. NOTE: the AddRouteEntry vector is covered by CVE-2007-5603.

Affected Products

2

Vendor	Product	Version
sonicwall	ssl_vpn	`All versions`
sonicwall	ssl_vpn	`All versions`

References

http://secunia.com/advisories/27469

http://securityreason.com/securityalert/3342

http://www.sec-consult.com/303.html

http://www.sec-consult.com/fileadmin/Advisories/20...

http://www.securityfocus.com/archive/1/483097/100/...

http://www.securityfocus.com/bid/26288

http://www.vupen.com/english/advisories/2007/3696

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

http://secunia.com/advisories/27469

http://securityreason.com/securityalert/3342

http://www.sec-consult.com/303.html

http://www.sec-consult.com/fileadmin/Advisories/20...

http://www.securityfocus.com/archive/1/483097/100/...

http://www.securityfocus.com/bid/26288

http://www.vupen.com/english/advisories/2007/3696

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

Weakness Types

CWE-119

CVE Information

CVE ID:: CVE-2007-5814
Published:: 2007-11-05
Modified:: 2026-04-23
CVSS Score:: 9.3
Severity:: HIGH
Vector:: AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected Vendors

sonicwall

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL