RCE in Sopcast Sopcore Activex Control
CVE-2009-0811
Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.055 (92.0th percentile) — read the EPSS interpretation.
Affected products
- Sopcast Sopcore_activex_control — versions 3.0.3.501
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)