CVE-2013-7246: Daum Communications Daumgame Activex Control

High severity, CVSS 9.3. EPSS: 11.2% chance of exploitation in the next 30 days.

Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows remote attackers to execute arbitrary code via a long string, as exploited in the wild in January 2014.

Affected products

• Daum Communications Daumgame Activex Control: version 1.1.0.4 only; version 1.1.0.5 only

Published 2014-01-30. Last modified 2026-06-17.