Vulnerability record · CVE-2007-2648 · published 14 May 2007

CVE-2007-2648: Clever components clever database comparer vulnerability

Clever Components · Clever Database Comparer

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function.

9.3 CVSS 2.0 High EPSS 7.0% · top 6.1%

9.3CVSS 2.0 base score

7.0%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

14References, 4 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Clever Database Comparer Clever Components

References

Link	Tags
http://moaxb.blogspot.com/2007/05/moaxb-14-clever-database-comparer.html
http://osvdb.org/36019
http://secunia.com/advisories/25227	Vendor Advisory
http://www.securityfocus.com/bid/23969	Exploit
http://www.shinnai.altervista.org/moaxb/20070514/clever.html	Exploit
http://www.vupen.com/english/advisories/2007/1792
https://exchange.xforce.ibmcloud.com/vulnerabilities/34261
http://moaxb.blogspot.com/2007/05/moaxb-14-clever-database-comparer.html
http://osvdb.org/36019
http://secunia.com/advisories/25227	Vendor Advisory
http://www.securityfocus.com/bid/23969	Exploit
http://www.shinnai.altervista.org/moaxb/20070514/clever.html	Exploit
http://www.vupen.com/english/advisories/2007/1792
https://exchange.xforce.ibmcloud.com/vulnerabilities/34261

Track CVE-2007-2648 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Source: NIST National Vulnerability Database (record CVE-2007-2648), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.