CVEvulnerability
CVE-2011-1065
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-02-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in the PIPIWebPlayer ActiveX control (PIWebPlayer.ocx) in PIPI Player 2.8.0.0 allow remote attackers to execute arbitrary code via long arguments to the (1) PlayURL or (2) PlayURLWithLocalPlayer methods.
Affected configurations
• pipi pipi player 2.8.0.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/43394 Vendor Advisory
- http://www.securityfocus.com/bid/46468 www.securityfocus.com
- http://www.wooyun.org/bugs/wooyun-2010-01382 www.wooyun.org
- http://www.wooyun.org/bugs/wooyun-2010-01383 www.wooyun.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65537 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/43394 Vendor Advisory
- http://www.securityfocus.com/bid/46468 www.securityfocus.com
- http://www.wooyun.org/bugs/wooyun-2010-01382 www.wooyun.org
- http://www.wooyun.org/bugs/wooyun-2010-01383 www.wooyun.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65537 exchange.xforce.ibmcloud.com