CVE-2007-0348: Buffer Overflow

Published Mar 21, 2007

Updated

Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property.

Affected Software

3 affected components

Interactual Technologies Interactual Player=2.60.12.0717

InterVideo Windvd=7.0.27.172

Roxio CinePlayer=3.2

Event History

Mar 21, 2007

CVE Published

07:19 PM

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0348?

CVE-2007-0348 is considered high severity due to its potential for remote code execution.

How do I fix CVE-2007-0348?

To fix CVE-2007-0348, you should update affected software to the latest versions provided by the vendors.

Which software is affected by CVE-2007-0348?

CVE-2007-0348 affects InterActual Player 2.60.12.0717, Roxio CinePlayer 3.2, and WinDVD 7.0.27.172.

How does CVE-2007-0348 function?

CVE-2007-0348 exploits a stack-based buffer overflow via a long ApplicationType property in the affected ActiveX control.

Can CVE-2007-0348 be exploited remotely?

Yes, CVE-2007-0348 allows remote attackers to exploit the vulnerability and execute arbitrary code.