critical9.3Public exploit code
CVE-2008-4664
Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control (QvodInsert.dll) in QVOD Player before 2.1.5 build 0053 allows remote attackers to execute …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Qvod Player 2.1.5 - 'QvodInsert.dll' ActiveX Control Remote Buffer Overflow2008-01-11 · remote · windows · Verified
Impact
Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control (QvodInsert.dll) in QVOD Player before 2.1.5 build 0053 allows remote attackers to execute arbitrary code via a long URL property. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qvod | Qvod Player | Versions 1.0.1, 2.0.1, 2.5.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://hi.baidu.com/muma_reader/blog/item/46bd0d7a04eb75e92f73b36e.html
- http://secunia.com/advisories/28494
- http://www.securityfocus.com/bid/27271
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39675
- http://hi.baidu.com/muma_reader/blog/item/46bd0d7a04eb75e92f73b36e.html
- http://secunia.com/advisories/28494
- http://www.securityfocus.com/bid/27271
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39675