CVE-2007-1955: Signkorea Skcommax Activex Control

High severity, CVSS 10.0. EPSS: 4.6% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2 allow remote attackers to execute arbitrary code via a long string in unspecified arguments to the (1) DownloadCert, (2) DecryptFileByKey, and (3) EncryptFileByKey functions, a different module and vectors than CVE-2007-1722. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Signkorea Skcommax Activex Control: version 5.4.1.2 only

Published 2007-04-11. Last modified 2026-06-16.