SignKorea SKCrypAX ActiveX Control Multiple Buffer Overflow Vulnerabilities

SignKorea SKCrypAX ActiveX Control Multiple Buffer Overflow Vulnerabilities

SignKorea SKCrypAX is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.

Exploiting these issues allows remote attackers to execute arbitrary code in the context of applications using the affected ActiveX control and to compromise affected computers. Failed attempts will likely result in denial-of-service conditions.

These issues affect SKCrypAX 5.4.1.2; other versions may also be affected.