Lucene search
HistoryOct 19, 2009 - 8:00 p.m.
CVE-2009-2970
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
8
Confidence
Low
EPSS
0.023
Percentile
89.7%
Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other products, allows remote attackers to execute arbitrary code via the filename parameter.
Affected configurations
Node
uitvuiplayer
baidubaidux
Related
prion
prion
Stack overflow
2009-10-19 20:00:00
seebug
seebug
UiPlayer UiCheckη»δ»Άζ ζΊ’εΊζΌζ΄
2009-10-20 00:00:00
securityvulns
securityvulns
UiTV UiPlayer ActiveX buffer overflow
2009-10-19 00:00:00
kaspersky
kaspersky
KLA10374 ACE vulnerability in UiTV UiPlayer
2009-10-19 00:00:00
cvelist
cvelist
CVE-2009-2970
2009-10-19 19:27:00
cve
cve
CVE-2009-2970
2009-10-19 20:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
8
Confidence
Low
EPSS
0.023
Percentile
89.7%
Related for NVD:CVE-2009-2970