PT-2008-2644 · Quantum+1 · Quantum Streaming Player Activex Control+1

E.B

·

Publicado

2008-02-27

·

Atualizado

2017-09-29

·

CVE-2008-1044

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Move Media Player versions 7.7.4.39 through 7.7.6.7
Description The issue is a stack-based buffer overflow in the Quantum Streaming Player ActiveX control. This can be exploited by remote attackers to execute arbitrary code via a long argument to the UploadLogs method.
Recommendations For versions 7.7.4.39 through 7.7.6.7, consider disabling the UploadLogs method until a patch is available to prevent potential exploitation.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-1044

Produtos afetados

Move Media Player
Quantum Streaming Player Activex Control