UUSee UUPlayer ActiveX Control Multiple Remote Code Execution Vulnerabilities
BID:48975
Info
UUSee UUPlayer ActiveX Control Multiple Remote Code Execution Vulnerabilities
| Bugtraq ID: | 48975 |
| Class: | Unknown |
| CVE: |
CVE-2011-2589 CVE-2011-2590 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 03 2011 12:00AM |
| Updated: | Aug 03 2011 12:00AM |
| Credit: | Secunia Research. |
| Vulnerable: |
UUSee UUPlayer 6.0.0.1 |
| Not Vulnerable: | |
Discussion
UUSee UUPlayer ActiveX Control Multiple Remote Code Execution Vulnerabilities
UUSee UUPlayer ActiveX control is prone to multiple remote code-execution vulnerabilites because the application fails to perform adequate boundary checks on user-supplied data.
Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application (typically Internet Explorer) using the ActiveX control. Failed exploit attempts will likely result in denial-of-service conditions.
UUPlayer 6.0.0.1 and UUPlayer 2010 6.11.0609.2 are vulnerable; other versions may also be affected.
UUSee UUPlayer ActiveX control is prone to multiple remote code-execution vulnerabilites because the application fails to perform adequate boundary checks on user-supplied data.
Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application (typically Internet Explorer) using the ActiveX control. Failed exploit attempts will likely result in denial-of-service conditions.
UUPlayer 6.0.0.1 and UUPlayer 2010 6.11.0609.2 are vulnerable; other versions may also be affected.
Exploit / POC
UUSee UUPlayer ActiveX Control Multiple Remote Code Execution Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
UUSee UUPlayer ActiveX Control Multiple Remote Code Execution Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
UUSee UUPlayer ActiveX Control Multiple Remote Code Execution Vulnerabilities
References:
References:
- Secunia Research: UUSee UUPlayer ActiveX Control Play() Code Execution Vulnerabi (Secunia Research)
- Secunia Research: UUSee UUPlayer ActiveX Control SendLogAction() Buffer Overflow (Secunia Research)
- UUPlayer Homepage (UUSee)