HTTP: Movie Player Pro SDK ActiveX Control DrawText Stack Buffer Overflow

This signature detects attempts to use unsafe ActiveX controls in Movie Player. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Movie Player Pro SDK ActiveX control is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successful exploits may allow an attacker to execute arbitrary code in the context of a user running the affected application. Failed attempts will likely result in denial-of-service conditions. Movie Player Pro SDK ActiveX 6.8 is vulnerable; other versions may be affected.

Affected Products

Viscom_softwares movie_player_pro_sdk_activex

References

BugTraq: 40719

CVE: CVE-2010-0356

URL: http://www.viscomsoft.com/products/movieplayerpro/index.html

Short Name

HTTP:STC:ACTIVEX:MOVIE-PLAYER

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Movie Player Pro SDK ActiveX Control DrawText Stack Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?