CVE-2007-0348 Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote....
HighCVSS 9.3
EPSS 36.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| interactual technologies interactual player | = 2.60.12.0717 | No fix listed |
| intervideo windvd | = 7.0.27.172 | No fix listed |
| roxio cineplayer | = 3.2 | No fix listed |
References
- 34314 vdb-entry
- 34315 vdb-entry
- 23032 third-party-advisory vendor-advisory
- 23075 third-party-advisory vendor-advisory
- 24556 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- VU#922969 third-party-advisory us-government-resource
- 20070321 Secunia Research: InterActual Player / CinePlayer IASystemInfo.dllActiveX Control Buffer Overflow mailing-list
- 23071 vdb-entry
- ADV-2007-1042 vdb-entry vendor-advisory
- ADV-2007-1043 vdb-entry vendor-advisory
- interactual-iasysteminfo-bo(33186) vdb-entry