CVE-2007-0348

CRITICAL 9.3CVE-2007-0348 · Published 21/03/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
interactual player interactual_technologies	`= 2.60.12.0717`	No fix yet
windvd intervideo	`= 7.0.27.172`	No fix yet
cineplayer roxio	`= 3.2`	No fix yet

Description

Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property.

References

osvdb.org/34314
osvdb.org/34315
secunia.com/advisories/23032 · Vendor Advisory
secunia.com/advisories/23075 · Vendor Advisory
secunia.com/advisories/24556 · Vendor Advisory
secunia.com/secunia_research/2007-37/advisory · Vendor Advisory
kb.cert.org/vuls/id/922969 · US Government Resource
securityfocus.com/archive/1/463405/100/0/threaded
securityfocus.com/bid/23071
vupen.com/english/advisories/2007/1042 · Vendor Advisory
vupen.com/english/advisories/2007/1043 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/33186

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free