CVE-2007-1891

Stack-based buffer overflow in the GetPrivateProfileSectionW function in Akamai Technologies Download Manager ActiveX Control (DownloadManagerV2.ocx) after 2.0.4.4 but before 2.2.1.0 allows remote attackers to execute arbitrary code, related to misinterpretation of the nSize parameter as a byte count instead of a wide character count.

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=514Patch, Vendor Advisory
• http://secunia.com/advisories/24900
• http://www.kb.cert.org/vuls/id/120241US Government Resource
• http://www.osvdb.org/34323
• http://www.securityfocus.com/archive/1/465908/100/0/threaded
• http://www.securityfocus.com/bid/23522
• http://www.securitytracker.com/id?1017925
• http://www.vupen.com/english/advisories/2007/1415
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=514Patch, Vendor Advisory
• http://secunia.com/advisories/24900
• http://www.kb.cert.org/vuls/id/120241US Government Resource
• http://www.osvdb.org/34323
• http://www.securityfocus.com/archive/1/465908/100/0/threaded
• http://www.securityfocus.com/bid/23522
• http://www.securitytracker.com/id?1017925
• http://www.vupen.com/english/advisories/2007/1415

Published

Apr 18, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1885Integer overflow in the str_replace function in PHP 4 before…
• CVE-2007-1886Integer overflow in the str_replace function in PHP 4.4.5 an…
• CVE-2007-1887Buffer overflow in the sqlite_decode_binary function in the …
• CVE-2007-1888Buffer overflow in the sqlite_decode_binary function in src/…
• CVE-2007-1889Integer signedness error in the _zend_mm_alloc_int function …
• CVE-2007-1890Integer overflow in the msg_receive function in PHP 4 before…
• CVE-2007-1892Stack-based buffer overflow in Akamai Technologies Download …
• CVE-2007-1893xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier…
• CVE-2007-1894Cross-site scripting (XSS) vulnerability in wp-includes/gene…
• CVE-2007-1895PHP remote file inclusion vulnerability in chat.php in Sky G…
• CVE-2007-1896Directory traversal vulnerability in chat.php in Sky GUNNING…
• CVE-2007-1897SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPr…