Filtered by vendor Tomahawk Technologies Subscriptions
Filtered by product Steelarrow Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2002-1441 1 Tomahawk Technologies 1 Steelarrow 2025-04-03 N/A
Multiple buffer overflows in Tomahawk SteelArrow before 4.5 allow remote attackers to execute arbitrary code via (1) the Steelarrow Service (Steelarrow.exe) using a long UserIdent Cookie header, (2) DLLHOST.EXE (Steelarrow.dll) via a request for a long .aro file, or (3) DLLHOST.EXE via a Chunked Transfer-Encoding request.