CVE-2007-5911

Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the (1) BroadcastKey, (2) BroadcastKeyFileURL, (3) Component, (4) ComponentClassID, (5) ComponentFileName, (6) ExtraProperty, (7) Properties, (8) RequiredVersions, (9) Source, or (10) XMLText method.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://osvdb.org/40268
http://shinnai.altervista.org/exploits/txt/TXT_dolp8rQrZmWLlINruy0o.html
http://www.securityfocus.com/bid/26356
https://exchange.xforce.ibmcloud.com/vulnerabilities/38287
https://www.exploit-db.com/exploits/4610

Configurations

Configuration 1 (hide)

cpe:2.3:a:viewpoint:media_player:3.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-11-10 02:46

Updated : 2024-02-28 11:01

NVD link : CVE-2007-5911

Mitre link : CVE-2007-5911

CVE.ORG link : CVE-2007-5911

JSON object : View

Products Affected

viewpoint

media_player

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2007-5911", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-11-10T02:46:00.000", "references": [{"url": "http://osvdb.org/40268", "source": "cve@mitre.org"}, {"url": "http://shinnai.altervista.org/exploits/txt/TXT_dolp8rQrZmWLlINruy0o.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/26356", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38287", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/4610", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the (1) BroadcastKey, (2) BroadcastKeyFileURL, (3) Component, (4) ComponentClassID, (5) ComponentFileName, (6) ExtraProperty, (7) Properties, (8) RequiredVersions, (9) Source, or (10) XMLText method."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer basados en pila en el control de ActiveX AxMetaStream en el AxMetaStream.dll 3.3.2.26 del Viewpoint Media Player 3.2 permiten a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s del paso de un argumento de cadena largo a los m\u00e9todos (1) BroadcastKey, (2) BroadcastKeyFileURL, (3) Component, (4) ComponentClassID, (5) ComponentFileName, (6) ExtraProperty, (7) Properties, (8) RequiredVersions, (9) Source o (10) XMLText."}], "lastModified": "2017-09-29T01:29:44.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:viewpoint:media_player:3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CBB7CD0E-E844-4E3A-9CCE-F88E8004AC10"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}