critical9.3Public exploit code
CVE-2007-1559
Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via (1) unspecified lon…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Roxio CinePlayer 3.2 - 'SonicDVDDashVRNav.dll' ActiveX Control Remote Buffer Overflow2007-04-11 · remote · windows · Verified
- Roxio CinePlayer - ActiveX Control Buffer Overflow (Metasploit)2010-04-30 · remote · windows · Verified
Impact
Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via (1) unspecified long property values to SonicMediaPlayer.dll or (2) long arguments to unspecified methods in SonicMediaPlayer.dll.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Roxio | Cineplayer | Version 3.2 |
References
- NVD record
- CVE.org record
- http://osvdb.org/34779
- http://secunia.com/advisories/22251
- http://secunia.com/secunia_research/2007-46/advisory/
- http://www.securityfocus.com/bid/23412
- http://www.securitytracker.com/id?1017906
- http://www.vupen.com/english/advisories/2007/1337
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33590
- http://osvdb.org/34779
- http://secunia.com/advisories/22251
- http://secunia.com/secunia_research/2007-46/advisory/
- http://www.securityfocus.com/bid/23412
- http://www.securitytracker.com/id?1017906
- http://www.vupen.com/english/advisories/2007/1337
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33590