CVE-2010-0356

EPSS 30.4%

Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/12320unverified exploitdbwww.exploit-db.com/exploits/18134unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/38156 https://exchange.xforce.ibmcloud.com/vulnerabilities/55536 http://www.shinnai.net/exploits/X6hU4E0E7P5H3qH5yXrn.txt http://www.vupen.com/english/advisories/2010/0093