medium6.8Public exploit code
CVE-2007-4722
Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Move Media Player 1.0 Quantum Streaming - ActiveX Control Multiple Buffer Overflow Vulnerabilities2007-09-04 · remote · windows · Verified
- Move Networks Quantum Streaming Player - Remote Overflow (SEH)2008-01-08 · remote · windows · Verified
Impact
Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allow remote attackers to execute arbitrary code via a long string to the (1) Play and (2) Buzzer methods.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Move Networks Inc | Move Media Player | Version 1.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/37778
- http://secunia.com/advisories/26600
- http://www.kb.cert.org/vuls/id/298345
- http://www.securityfocus.com/bid/25529
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36433
- https://www.exploit-db.com/exploits/4868
- http://osvdb.org/37778
- http://secunia.com/advisories/26600
- http://www.kb.cert.org/vuls/id/298345
- http://www.securityfocus.com/bid/25529
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36433
- https://www.exploit-db.com/exploits/4868