Lucene search
HistoryOct 19, 2009 - 8:00 p.m.
CVE-2009-2970
cve-2009-2970
buffer overflow
activex
uicheck.dll
remote code execution
nvd
8.2 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.023 Low
EPSS
Percentile
89.6%
Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other products, allows remote attackers to execute arbitrary code via the filename parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| uitv:uiplayer | uitv uiplayer | eq | * |
| baidu:baidux | baidu baidux | eq | * |
Related
securityvulns
securityvulns
UiTV UiPlayer ActiveX buffer overflow
2009-10-19 00:00:00
prion
prion
Stack overflow
2009-10-19 20:00:00
seebug
seebug
UiPlayer UiCheck组件栈溢出漏洞
2009-10-20 00:00:00
kaspersky
kaspersky
KLA10374 ACE vulnerability in UiTV UiPlayer
2009-10-19 00:00:00
8.2 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.023 Low
EPSS
Percentile
89.6%
Related for CVE-2009-2970