CVE-2013-7246: Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1...

Security readout for executives and security teams

This is an old browser plugin vulnerability in the DaumGame ActiveX control. A malicious web page could abuse the IconCreate method with oversized input and potentially run code on a Windows user’s machine if the vulnerable plugin is installed and usable. Exposure is most likely in legacy Windows environments where Internet Explorer or ActiveX-capable workflows still allow the DaumGame ActiveX plugin. Modern environments without this plugin, without ActiveX, or without legacy browser access are unlikely to be affected. Treat this as high priority only where legacy ActiveX usage exists. The business risk is endpoint compromise through a browser-based attack path, but exposure should be narrow if modern browser controls and software inventory are enforced. Mitigation focus: Inventory endpoints for DaumGame ActiveX plugin versions 1.1.0.4 and 1.1.0.5.; Remove or disable the vulnerable ActiveX plugin where business use is not required.; Check vendor or trusted advisory guidance for any fixed version or official workaround..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.