Published: 05/09/2007 Updated: 29/09/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 690

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allow remote malicious users to execute arbitrary code via a long string to the (1) Play and (2) Buzzer methods.

Vulnerable Product	Search on Vulmon	Subscribe to Product
move networks inc move media player 1.0.1

Move Networks Quantum Streaming player SEH overwrite exploit that spawns calcexe ...

<html> <head> <title>Move Networks Q ...

source: wwwsecurityfocuscom/bid/25529/info Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before copying it into insufficiently sized memory buffers Exploiting these issues allows remote attackers to execute arbitrary code in the con ...

CWE-119 http://secunia.com/advisories/26600 http://www.kb.cert.org/vuls/id/298345 http://www.securityfocus.com/bid/25529 http://osvdb.org/37778 https://exchange.xforce.ibmcloud.com/vulnerabilities/36433 https://www.exploit-db.com/exploits/4868 https://nvd.nist.gov https://packetstormsecurity.com/files/62429/move-overwrite.txt.html https://www.exploit-db.com/exploits/4868/https://www.kb.cert.org/vuls/id/298345

CVE-2007-4722

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect