CVE-2011-1065 Multiple stack-based buffer overflows in the PIPIWebPlayer ActiveX control (PIWebPlayer.ocx) in PIPI Player 2.8.0.0 allow remote attackers to execute arbitrary code via long arguments to the (1) PlayU...
HighCVSS 9.3
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the PIPIWebPlayer ActiveX control (PIWebPlayer.ocx) in PIPI Player 2.8.0.0 allow remote attackers to execute arbitrary code via long arguments to the (1) PlayURL or (2) PlayURLWithLocalPlayer methods.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pipi player | = 2.8.0.0 | No fix listed |
References
- 43394 third-party-advisory vendor-advisory
- 46468 vdb-entry
- www.wooyun.org
- www.wooyun.org
- pipiplayer-activex-control-bo(65537) vdb-entry