description: A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML file that loads the ActiveX controls can trigger the vulnerability via unchecked function calls.
problem types: HEAP-BASED BUFFER OVERFLOW CWE-122
affected:
{
product: GE Communicator
vendor: GE
versions:
status: affected, version: Communicator 3.15 and prior.
}