Описание
Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control (QvodInsert.dll) in QVOD Player before 2.1.5 build 0053 allows remote attackers to execute arbitrary code via a long URL property. NOTE: some of these details are obtained from third party information.
Комментарий
Version 2.1.5 of QVOD Player does not exist. The correct version is 2.5.1.
Ссылки
- PatchVendor Advisory
- ExploitPatch
- PatchVendor Advisory
- ExploitPatch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:qvod:qvod_player:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:qvod:qvod_player:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:qvod:qvod_player:2.5.1:*:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.15435
Средний
9.3 Critical
CVSS2
Дефекты
CWE-119
Связанные уязвимости
github
больше 3 лет назад
Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control (QvodInsert.dll) in QVOD Player before 2.1.5 build 0053 allows remote attackers to execute arbitrary code via a long URL property. NOTE: some of these details are obtained from third party information.
EPSS
Процентиль: 94%
0.15435
Средний
9.3 Critical
CVSS2
Дефекты
CWE-119