UiTV UiPlayer ActiveX buffer overflow - security vulnerabilities database

[EN] securityvulns.ru
no-pyccku

UiTV UiPlayer ActiveX buffer overflow
Published: 19.10.2009
Source: BUGTRAQ
SecurityVulns ID: 10327
Type: client
Level: 5/10
Description: Buffer overflow in UiCheck.dll

CVE: CVE-2009-2970 (Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other products, allows remote attackers to execute arbitrary code via the filename parameter.)

Original document NSFOCUS, NSFOCUS SA2009-01 : UiTV UiPlayer UiCheck Component Stack Buffer Overflow Vulnerability (19.10.2009)

Discuss: Read or add your comments to this news (0 comments)