CVE-2009-4841

The CVE-2009-4841 entry describes a heap-based buffer overflow in the SonicMediaPlayer ActiveX control (SonicMediaPlayer.dll) shipped with Roxio CinePlayer 3.2. An attacker can trigger arbitrary code execution by passing a long argument to the DiskType method of the ActiveX control, enabling remo...

CVE-2007-1559

CVE-2007-1559 affects Roxio CinePlayer 3.2, involving stack-based buffer overflows in SonicMediaPlayer.dll (and related SonicDVDDashVRNav.dll) that allow remote code execution. The documented vectors involve overly long values in SonicMediaPlayer.dll (DiskType method) or other long arguments to S...

CVE-2007-0348

CVE-2007-0348 : The IASystemInfo.dll ActiveX control in InterActual Player, Roxio CinePlayer, and WinDVD 7 embeds a stack-based buffer overflow vulnerability that can be triggered by a long ApplicationType property, enabling remote arbitrary code execution. Public references confirm vulnerable co...

CVE-2007-3829

The CVE-2007-3829 issue affects InterActual Player and Roxio CinePlayer due to stack-based buffer overflows in ActiveX controls IAKey (IAKEY.dll) and IAMCE (IAMCE.dll). Vendors describe a remote code execution risk when a user is convinced to view specially crafted HTML (e.g., web page or HTML em...

CVE-2009-4840

The CVE-2009-4840 entry describes a heap-based buffer overflow in the IAManager ActiveX control (IAManager.dll) of Roxio CinePlayer 3.2. An attacker can cause arbitrary code execution by sending a long argument to SetIAPlayerName. Connected records confirm the vulnerable component and the root ca...