Description
DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via the bstrSavePath argument.
References
- 13167 vdb-entry
- 20050415 Arbitrary file overwrite possible by Musicmatch ActiveX control mailing-list