CVE-2010-0356 Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbit...
HighCVSS 9.3
EPSS 30.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| viscomsoft movie player pro sdk activex | = 6.8 | No fix listed |
References
- 38156 third-party-advisory vendor-advisory
- www.shinnai.net exploit url-repurposed
- ADV-2010-0093 vdb-entry vendor-advisory
- movieplayer-drawtext-activex-bo(55536) vdb-entry