Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Applica…

Published 17 y ago 2009-04-16 · modified 4 mo ago 2026-06-16 · JSON

CVSS

9.3

v2.0 · NVD

CISA KEV

not known exploited

EPSS

45.5%

percentile 99%

Public exploits

Metasploit · Exploit-DB

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2) UpdateComponents methods.

Exploit prediction (EPSS)

45.53% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

Metasploit exploit/windows/browser/mswhale_checkforupdates Microsoft Whale Intelligent Application Gateway ActiveX Control Buffer Overflow · metasploit exploit, normal rank · 2009-04-15
EDB-16608 Microsoft Whale Intelligent Application Gateway - ActiveX Control Buffer Overflow (Metasploit) · remote · 2010-05-09

CVSS scores

Assigned by	Version	Score	Vector
NVD	2.0	9.3	`AV:N/AC:M/Au:N/C:C/I:C/A:C`

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

kb.cert.org /vuls/id/789121 · third-party-advisory, x_refsource_CERT-VN, x_transferred
vupen.com /english/advisories/2009/1061 · vdb-entry, x_refsource_VUPEN, x_transferred
secunia.com /advisories/34725 · third-party-advisory, x_refsource_SECUNIA, x_transferred
securityfocus.com /bid/34532 · vdb-entry, x_refsource_BID, x_transferred
exchange.xforce.ibmcloud.com /vulnerabilities/49888 · vdb-entry, x_refsource_XF, x_transferred

Sources

CVE List: CVE-2007-2238
NVD: CVE-2007-2238

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.