Movie Player Pro SDK ActiveX Control 'DrawText' Stack Buffer Overflow Vulnerability

Bugtraq ID:	40719
Class:	Boundary Condition Error
CVE:	CVE-2010-0356
Remote:	Yes
Local:	No
Published:	Jan 12 2010 12:00AM
Updated:	Nov 21 2011 07:05AM
Credit:	shinnai
Vulnerable:	Viscom Softwares Movie Player Pro SDK ActiveX 6.8
Not Vulnerable:

Movie Player Pro SDK ActiveX Control 'DrawText' Stack Buffer Overflow Vulnerability

Movie Player Pro SDK ActiveX control is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Successful exploits may allow an attacker to execute arbitrary code in the context of a user running the affected application. Failed attempts will likely result in denial-of-service conditions.

Movie Player Pro SDK ActiveX 6.8 is vulnerable; other versions may be affected.

Movie Player Pro SDK ActiveX Control 'DrawText' Stack Buffer Overflow Vulnerability

The following exploit codes are available:

• /data/vulnerabilities/exploits/40719.html
• /data/vulnerabilities/exploits/40719.rb

Movie Player Pro SDK ActiveX Control 'DrawText' Stack Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Movie Player Pro SDK ActiveX Control 'DrawText' Stack Buffer Overflow Vulnerability

References:

• Microsoft Support Document 240797 (Microsoft)
  
• Movie Player Pro SDK ActiveX - Homepage (Viscom Softwares)
  
• Viscom Software Movie Player Pro SDK ActiveX 6.8 Remote Buffer Overflow (shinnai)