NetSight
IP …
critical9.3Public exploit code

CVE-2007-0348

Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, an…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property.

Affected products

VendorProductAffected versions
Interactual TechnologiesInteractual Player
Version 2.60.12.0717
IntervideoWindvd
Version 7.0.27.172
RoxioCineplayer
Version 3.2

Weakness classification

CWE-119

References