CVE-2008-0220

Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the (1) second or (2) fourth argument to the DoWebLaunch method. NOTE: some of these details are obtained from third party information.

• CWE-119

• http://marc.info/?l=full-disclosure&m=119984138526735&w=2
• http://secunia.com/advisories/28379Vendor Advisory
• http://www.kb.cert.org/vuls/id/735441US Government Resource
• http://www.securityfocus.com/bid/27193
• http://www.vupen.com/english/advisories/2008/0077
• https://www.exploit-db.com/exploits/4869
• https://www.exploit-db.com/exploits/4982
• http://marc.info/?l=full-disclosure&m=119984138526735&w=2
• http://secunia.com/advisories/28379Vendor Advisory
• http://www.kb.cert.org/vuls/id/735441US Government Resource
• http://www.securityfocus.com/bid/27193
• http://www.vupen.com/english/advisories/2008/0077
• https://www.exploit-db.com/exploits/4869
• https://www.exploit-db.com/exploits/4982

Published

Jan 10, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0214Multiple unspecified vulnerabilities in HP Select Identity 4…
• CVE-2008-0215Multiple unspecified vulnerabilities in HP Storage Essential…
• CVE-2008-0216The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE d…
• CVE-2008-0217The script program in FreeBSD 5.0 through 7.0-PRERELEASE inv…
• CVE-2008-0218Cross-site scripting (XSS) vulnerability in admin/index.html…
• CVE-2008-0219SQL injection vulnerability in soporte_horizontal_w.php in P…
• CVE-2008-0221Directory traversal vulnerability in the WebLaunch.Weblaunch…
• CVE-2008-0222Unrestricted file upload vulnerability in ajaxfilemanager.ph…
• CVE-2008-0223Buffer overflow in JustSystems JSFC.DLL, as used in multiple…
• CVE-2008-0224SQL injection vulnerability in index.php in the Newbb_plus 0…
• CVE-2008-0225Heap-based buffer overflow in the rmff_dump_cont function in…
• CVE-2008-0226Multiple buffer overflows in yaSSL 1.7.5 and earlier, as use…