Unscored CVE-2009-2970 EUVD-2009-2955GHSA-phxv-vc8h-3g23

Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used i…

Published Oct 19, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other products, allows remote attackers to execute arbitrary code via the filename parameter.

References

http://www.nsfocus.com/en/advisories/0901.html
20091016 NSFOCUS SA2009-01 : UiTV UiPlayer UiCheck Component Stack Buffer Overflow Vulnerability mailing-list