PT-2007-5878
CVE-2007-4722
·
Published
2007-09-05
·
Updated
2017-09-29
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
Move Media Player version 1.0.0.1
Description:
The issue is related to multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control. This can be exploited by remote attackers to execute arbitrary code via a long string to the
Play and Buzzer methods.Recommendations:
For Move Media Player version 1.0.0.1, consider disabling the
Play and Buzzer methods until a patch is available to prevent exploitation.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾