VDB
CVE-2007-3829
CVE-2007-3829
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Multiple stack-based buffer overflows in (a) InterActual Player 2.60.12.0717 and (b) Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a (1) long FailURL attribute in the IAMCE ActiveX Control (IAMCE.dll) or a (2) long URLCode attribute in the IAKey ActiveX Control (IAKey.dll). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
EPSS 24.64% · 96.2th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
24.64%
96.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| interactual_technologies | interactual_player | 2.60.12.0717 |
| n/a | n/a | * |
| roxio | cineplayer | 3.2 |
Timeline
- Jul 17, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 1, 2022 CVE Updated
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
References
- http://osvdb.org/37717 technical
- 25739 third-party-advisory
- 37718 vdb
- interactual-iamce-bo(35422) vdb
- VU#470913 third-party-advisory
- 25718 third-party-advisory
- 24919 vdb
- VU#916897 third-party-advisory
- interactual-cineplayer-iakey-bo(35423) vdb
- https://nvd.nist.gov/vuln/detail/CVE-2007-3829 advisory