EUVD-2011-2573

Malware in sbrugna...

Heap overflow

Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 might allow remote attackers to execute arbitrary code via a long argument...

Code injection

The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter...

CVE-2011-2589

Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 might allow remote attackers to execute arbitrary code via a long argument...

CVE-2011-2589

Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 might allow remote attackers to execute arbitrary code via a long argument...

PT-2011-3941

Name of the Vulnerable Software and Affected Versions UUSee 2010 version 6.11.0609.2 UUPlayer ActiveX control version 6.0.0.1 Description The issue is related to a heap-based buffer overflow in the SendLogAction method of the UUPlayer ActiveX control. This could potentially allow remote attackers...

PT-2011-3942

Name of the Vulnerable Software and Affected Versions UUSee 2010 version 6.11.0609.2 UUPlayer ActiveX control version 6.0.0.1 Description The issue allows remote attackers to execute arbitrary programs. This is achieved via a UNC share pathname in the MPlayerPath parameter of the Play method in t...

CVE-2011-2590: Improper Input Validation

The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter...

CVE-2011-2589: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 might allow remote attackers to execute arbitrary code via a long argument...