CVE-2007-2835: Unicon-IMC2

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in (1) CCE_pinyin.c and (2) xl_pinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable.

Affected products

• Unicon-IMC2 Unicon-IMC2: version 3.0.4 only

Published 2007-07-03. Last modified 2026-06-16.