EUVD-2011-2572

Malware in sbrugna...

EUVD-2011-2573

Malware in sbrugna...

Heap overflow

Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 might allow remote attackers to execute arbitrary code via a long argument...

Code injection

The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter...

CVE-2011-2589

Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 might allow remote attackers to execute arbitrary code via a long argument...

CVE-2011-2589

Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 might allow remote attackers to execute arbitrary code via a long argument...

CVE-2011-2590

The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter...

UUSee UUPlayer ActiveX控件"DoCmd()"缓冲区溢出漏洞

UUSee是一款集P2P直播点播于一身的网络电视软件。 UUPlayer.ocx ActiveX控件处理DoCmd方法时没有验证输入内容，导致内存破坏，攻击者构建恶意WEB页，诱使用户解析可导致基于栈的缓冲区溢出，成功利用漏洞可以以应用程序上下文执行任意代码。 UUPlayer ActiveX Control UUPlayer.ocx 6.x UUSee 2010 厂商解决方案 目前没有详细解决方案提供： http://www.uusee.com/ html object classid=”clsid:77910CD3-5447-4CCB-92DE-35BA8198BE81″...