CVE-2007-0348

2007-03-2119:19:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2007-0348

stack-based buffer overflow

iasysteminfo.dll

activex control

remote code execution

interactual player

roxio cineplayer

windvd

8.1 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.862 High

EPSS

Percentile

98.6%

JSON

Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property.

CPENameOperatorVersion
intervideo:windvdintervideo windvdeq7.0.27.172
roxio:cineplayerroxio cineplayereq3.2
interactual_technologies:interactual_playerinteractual technologies interactual playereq2.60.12.0717

CPE	Name	Operator	Version
intervideo:windvd	intervideo windvd	eq	7.0.27.172
roxio:cineplayer	roxio cineplayer	eq	3.2
interactual_technologies:interactual_player	interactual technologies interactual player	eq	2.60.12.0717