CVE-2007-3829

CRITICAL 9.3CVE-2007-3829 · Published 17/07/2007 · updated 16/06/2026

In short

CVE-2007-3829 is a CRITICAL (CVSS 9.3) vulnerability affecting interactual player (interactual technologies), cineplayer (roxio).
Chance of exploitation in the next 30 days (EPSS): 8.2%, higher than 94.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
interactual player interactual_technologies	`= 2.60.12.0717`	No fix yet
cineplayer roxio	`= 3.2`	No fix yet

Description

Multiple stack-based buffer overflows in (a) InterActual Player 2.60.12.0717 and (b) Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a (1) long FailURL attribute in the IAMCE ActiveX Control (IAMCE.dll) or a (2) long URLCode attribute in the IAKey ActiveX Control (IAKey.dll). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

osvdb.org/37717
osvdb.org/37718
secunia.com/advisories/25718 · Vendor Advisory
secunia.com/advisories/25739 · Vendor Advisory
kb.cert.org/vuls/id/470913 · US Government Resource
kb.cert.org/vuls/id/916897 · US Government Resource
securityfocus.com/bid/24919
exchange.xforce.ibmcloud.com/vulnerabilities/35422
exchange.xforce.ibmcloud.com/vulnerabilities/35423

More vulnerabilities in interactual player

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free