CVEvulnerability
CVE-2010-0990
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01, allows remote attackers to execute arbitrary code via vectors related to the BrowseFolder method.
Affected configurations
• creative autoupdate engine activex control 2.0.12.0
• creative autoupdate 1.40.01
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/38970 Vendor Advisory
- http://secunia.com/secunia_research/2010-52/ Vendor Advisory
- http://www.securityfocus.com/archive/1/511795/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/40768 www.securityfocus.com
- http://secunia.com/advisories/38970 Vendor Advisory
- http://secunia.com/secunia_research/2010-52/ Vendor Advisory
- http://www.securityfocus.com/archive/1/511795/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/40768 www.securityfocus.com