Lucene search

K
cve[email protected]CVE-2009-1740
HistoryMay 20, 2009 - 7:30 p.m.

CVE-2009-1740

2009-05-2019:30:00
CWE-119
web.nvd.nist.gov
27
cve-2009-1740
buffer overflow
remote code execution
d-link
activex control
security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.03 Low

EPSS

Percentile

91.0%

Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) 2.11.918.2006 allow remote attackers to execute arbitrary code via a long argument to the (1) SetFilePath and (2) SetClientCookie methods. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD
Node
dlinkmpeg4_viewer_activex_controlMatch2.11.918.2006

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.03 Low

EPSS

Percentile

91.0%

Related for CVE-2009-1740