Buffer overflow in Haihaisoft Universal Player

CVE-2009-4219

Stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4.8.0 in Haihaisoft Universal Player allows remote attackers to execute arbitrary code via a long URL property value. NOTE: some of these details are obtained from third party information.

Vulnerability class: Buffer Overflow

EPSS: 0.093 (94.8th percentile) — read the EPSS interpretation.

Affected products

Haihaisoft Haihaisoft_universal_player — versions 1.4.8.0
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (URL Repurposed, Exploit, x_refsource_MISC)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)