CVE-2007-1722: Signkorea Skcommax Activex Control

High severity, CVSS 10.0. EPSS: 3.4% chance of exploitation in the next 30 days.

Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote attackers to execute arbitrary code via a long pszUserID argument.

Affected products

• Signkorea Skcommax Activex Control: version 6.6.0.1_3280 only; version 7.2.0.2 only

Published 2007-03-28. Last modified 2026-06-16.