PT-2007-1819 · Intervideo+2 · Windvd+2

Published 2007-03-21 · Updated 2018-10-16 · CVE-2007-0348

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: InterActual Player version 2.60.12.0717 Roxio CinePlayer version 3.2 WinDVD version 7.0.27.172

Description: The issue is a stack-based buffer overflow in the IASystemInfo.dll ActiveX control. This allows remote attackers to execute arbitrary code via a long ApplicationType property.

Recommendations: For InterActual Player version 2.60.12.0717, consider disabling the IASystemInfo.dll ActiveX control until a patch is available. For Roxio CinePlayer version 3.2, restrict access to the IASystemInfo.dll ActiveX control to minimize the risk of exploitation. For WinDVD version 7.0.27.172, avoid using the ApplicationType property in the affected ActiveX control until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-0348

Affected Products

Interactual Player

Roxio Cineplayer

Windvd

References · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/windvd7_applicationtype.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16529 · Exploit
• http://secunia.com/advisories/23075 · Vendor Advisory
• http://vupen.com/english/advisories/2007/1043 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0348 · Security Note
• http://vupen.com/english/advisories/2007/1042 · Vendor Advisory
• http://secunia.com/advisories/23032 · Vendor Advisory
• http://secunia.com/secunia_research/2007-37/advisory · Vendor Advisory
• http://secunia.com/advisories/24556 · Vendor Advisory
• http://osvdb.org/34315 · Note
• http://securityfocus.com/bid/23071 · Note
• http://kb.cert.org/vuls/id/922969 · Note
• http://securityfocus.com/archive/1/463405/100/0/threaded · Note
• http://osvdb.org/34314 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33186 · Note