Creative Software AutoUpdate Engine 2 ActiveX buffer overflow

[EN] securityvulns.ru
no-pyccku

Creative Software AutoUpdate Engine 2 ActiveX buffer overflow
Published: 11.06.2010
Source: BUGTRAQ
SecurityVulns ID: 10920
Type: client
Level: 5/10
Description: Buffer overflow in BrowseFolder() method

CVE: CVE-2010-0990 (Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01, allows remote attackers to execute arbitrary code via vectors related to the BrowseFolder method.)

Original document SECUNIA, Secunia Research: Creative Software AutoUpdate Engine 2 ActiveX Control Buffer Overflow (11.06.2010)

Discuss: Read or add your comments to this news (0 comments)