CVE-2007-0348
Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 35.1%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 35.14% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- interactual technologies/interactual player · intervideo/windvd · roxio/cineplayer
- Source
- PSIRT-CNA@flexerasoftware.com
References
- http://osvdb.org/34314
- http://osvdb.org/34315
- http://secunia.com/advisories/23032Vendor Advisory
- http://secunia.com/advisories/23075Vendor Advisory
- http://secunia.com/advisories/24556Vendor Advisory
- http://secunia.com/secunia_research/2007-37/advisory/Vendor Advisory
- http://www.kb.cert.org/vuls/id/922969US Government Resource
- http://www.securityfocus.com/archive/1/463405/100/0/threaded
- http://www.securityfocus.com/bid/23071
- http://www.vupen.com/english/advisories/2007/1042Vendor Advisory
- http://www.vupen.com/english/advisories/2007/1043Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33186
- http://osvdb.org/34314
- http://osvdb.org/34315
- http://secunia.com/advisories/23032Vendor Advisory
- http://secunia.com/advisories/23075Vendor Advisory
- http://secunia.com/advisories/24556Vendor Advisory
- http://secunia.com/secunia_research/2007-37/advisory/Vendor Advisory
- http://www.kb.cert.org/vuls/id/922969US Government Resource
- http://www.securityfocus.com/archive/1/463405/100/0/threaded
- http://www.securityfocus.com/bid/23071
- http://www.vupen.com/english/advisories/2007/1042Vendor Advisory
- http://www.vupen.com/english/advisories/2007/1043Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33186
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.