CVE-2007-0348

Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

35.14% chance of exploitation in the next 30 days, 98th percentile

Published

2007-03-21

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/windvd7_applicat…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16529

References

• CVE Record
• NVD entry

Related

• CVE-2007-0347
• CVE-2007-0350
• CVE-2007-0345
• CVE-2007-0351
• CVE-2007-0344
• CVE-2007-0352