CVE-2007-3829 Multiple stack-based buffer overflows in (a) InterActual Player 2.60.12.0717 and (b) Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a (1) long FailURL attribute in the IAMCE...
HighCVSS 9.3
EPSS 8.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in (a) InterActual Player 2.60.12.0717 and (b) Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a (1) long FailURL attribute in the IAMCE ActiveX Control (IAMCE.dll) or a (2) long URLCode attribute in the IAKey ActiveX Control (IAKey.dll). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| interactual technologies interactual player | = 2.60.12.0717 | No fix listed |
| roxio cineplayer | = 3.2 | No fix listed |
References
- 37717 vdb-entry
- 37718 vdb-entry
- 25718 third-party-advisory vendor-advisory
- 25739 third-party-advisory vendor-advisory
- VU#470913 third-party-advisory us-government-resource
- VU#916897 third-party-advisory us-government-resource
- 24919 vdb-entry
- interactual-iamce-bo(35422) vdb-entry
- interactual-cineplayer-iakey-bo(35423) vdb-entry