CVE-2011-2590 The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter.
HighCVSS 9.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| uusee uuplayer activex control | = 6.0.0.1 | No fix listed |
| uusee | = 2010_6.11.0609.2 | No fix listed |
References
- 44885 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 74217 vdb-entry
- 48975 vdb-entry
- uusee-play-code-execution(68975) vdb-entry