CVEvulnerability
CVE-2007-0348
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-03-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property.
Affected configurations
• interactual technologies interactual player 2.60.12.0717
• intervideo windvd 7.0.27.172
• roxio cineplayer 3.2
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/34314 osvdb.org
- http://osvdb.org/34315 osvdb.org
- http://secunia.com/advisories/23032 Vendor Advisory
- http://secunia.com/advisories/23075 Vendor Advisory
- http://secunia.com/advisories/24556 Vendor Advisory
- http://secunia.com/secunia_research/2007-37/advisory/ Vendor Advisory
- http://www.kb.cert.org/vuls/id/922969 US Government Resource
- http://www.securityfocus.com/archive/1/463405/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23071 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1042 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/1043 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33186 exchange.xforce.ibmcloud.com
- http://osvdb.org/34314 osvdb.org
- http://osvdb.org/34315 osvdb.org
- http://secunia.com/advisories/23032 Vendor Advisory
- http://secunia.com/advisories/23075 Vendor Advisory
- http://secunia.com/advisories/24556 Vendor Advisory
- http://secunia.com/secunia_research/2007-37/advisory/ Vendor Advisory
- http://www.kb.cert.org/vuls/id/922969 US Government Resource
- http://www.securityfocus.com/archive/1/463405/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23071 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1042 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/1043 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33186 exchange.xforce.ibmcloud.com