CVE Feed

    Dashboard / CVE / CVE-2007-0348

    CVE-2007-0348

    Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property.

    Published:Mar 21, 2007
    Last Modified:Apr 23, 2026
    EPS:Mar 21, 2007
    EPSS Score:0.72691
    CVSS Score:9.3

    Affected Products

    Vendor
    Interactual Technologies
    Product
    Interactual Player
    Vendor
    Intervideo
    Product
    Windvd
    Vendor
    Roxio
    Product
    Cineplayer

    Exploits

    https://www.exploit-db.com/exploits/16529

    References

    http://osvdb.org/34314
    http://osvdb.org/34315
    http://secunia.com/advisories/23032
    http://secunia.com/advisories/23075
    http://secunia.com/advisories/24556
    http://secunia.com/secunia_research/2007-37/advisory/
    http://www.kb.cert.org/vuls/id/922969
    http://www.securityfocus.com/archive/1/463405/100/0/threaded
    http://www.securityfocus.com/bid/23071
    http://www.vupen.com/english/advisories/2007/1042
    http://www.vupen.com/english/advisories/2007/1043
    https://exchange.xforce.ibmcloud.com/vulnerabilities/33186
    http://osvdb.org/34314
    http://osvdb.org/34315
    http://secunia.com/advisories/23032
    http://secunia.com/advisories/23075
    http://secunia.com/advisories/24556
    http://secunia.com/secunia_research/2007-37/advisory/
    http://www.kb.cert.org/vuls/id/922969
    http://www.securityfocus.com/archive/1/463405/100/0/threaded
    http://www.securityfocus.com/bid/23071
    http://www.vupen.com/english/advisories/2007/1042
    http://www.vupen.com/english/advisories/2007/1043
    https://exchange.xforce.ibmcloud.com/vulnerabilities/33186

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High