CVE-2007-5911 Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string....
MediumCVSS 6.8
EPSS 4.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the (1) BroadcastKey, (2) BroadcastKeyFileURL, (3) Component, (4) ComponentClassID, (5) ComponentFileName, (6) ExtraProperty, (7) Properties, (8) RequiredVersions, (9) Source, or (10) XMLText method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| viewpoint media player | = 3.2 | No fix listed |
References
- 40268 vdb-entry
- shinnai.altervista.org
- 26356 vdb-entry
- viewpoint-media-multiple-bo(38287) vdb-entry
- 4610 exploit