Lucene search

K
kasperskyKaspersky LabKLA10374
HistoryOct 19, 2009 - 12:00 a.m.

KLA10374 ACE vulnerability in UiTV UiPlayer

2009-10-1900:00:00
Kaspersky Lab
threats.kaspersky.com
22

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.023 Low

EPSS

Percentile

89.5%

Detect date:

10/19/2009

Severity:

Critical

Description:

A buffer overflow was found in UiTV UiPlayer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed filename parameter.

Affected products:

UiTV UiPlayer versions earlier than 1.0.0.7

Solution:

Update to latest version

Impacts:

ACE

Related products:

UiTV UiPlayer

CVE-IDS:

CVE-2009-29709.3Critical

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.023 Low

EPSS

Percentile

89.5%