CVE-2007-2323: Buffer Overflow

Published Apr 27, 2007

Updated

Multiple buffer overflows in the WinDVDX ActiveX control in InterVideo Home Theater 2.1.13.0 and 2.5.13.58 allow remote attackers to execute arbitrary code via a long string argument to the (1) GetDiscType or (2) AddFileList method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

2 affected components

InterVideo Home Theater=2.5.13.58

InterVideo Home Theater=2.1.13.0

Event History

Apr 27, 2007

CVE Published

12:19 AM

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2323?

CVE-2007-2323 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2007-2323?

To fix CVE-2007-2323, users should update to the latest version of InterVideo Home Theater that addresses the buffer overflow vulnerabilities.

What software is affected by CVE-2007-2323?

CVE-2007-2323 affects InterVideo Home Theater versions 2.1.13.0 and 2.5.13.58.

What types of attacks are enabled by CVE-2007-2323?

CVE-2007-2323 allows remote attackers to execute arbitrary code by exploiting buffer overflow vulnerabilities in the ActiveX control.

What methods in InterVideo Home Theater are vulnerable in CVE-2007-2323?

The vulnerable methods in InterVideo Home Theater for CVE-2007-2323 are GetDiscType and AddFileList.