PT-2007-7042 · Xunlei · Xunlei Thunder

Published 2007-11-27 · Updated 2011-03-08 · CVE-2007-6144

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xunlei Thunder version 5.7.4.401

Description A heap-based buffer overflow issue exists in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll, allowing remote attackers to execute arbitrary code via a long string in a FlvPlayerUrl property value.

Recommendations For Xunlei Thunder version 5.7.4.401, consider disabling the PPlayer.XPPlayer.1 ActiveX control until a patch is available to prevent exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-6144

Affected Products

Xunlei Thunder

References · 7

• 🔥 http://sebug.net/exploit/2575 · Exploit
• 🔥 http://nohack.cn/hacknews/20071119/1916.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6144 · Security Note
• http://secunia.com/advisories/27795 · Vendor Advisory
• http://securityfocus.com/bid/26536 · Note
• http://osvdb.org/39680 · Note
• http://vupen.com/english/advisories/2007/3982 · Note