CVE-2010-0356

Viscom Software Movie Player Pro SDK ActiveX 6.8 exposes a stack-based buffer overflow in MOVIEPLAYER.MoviePlayerCtrl.1 (MoviePlayer.ocx 6.8.0.0). A long strFontName passed to DrawText can allow remote code execution. Public exploits exist (Metasploit and others) and show attacker-hosted pages or...