9.3
CVSSv2

CVE-2009-0811

Published: 04/03/2009 Updated: 10/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote malicious users to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method.

Vulnerable Product Search on Vulmon Subscribe to Product

sopcast sopcore activex control 3.0.3.501

Exploits

<!-- Sopcast SopCore Control (sopocxocx 303501) SetExternalPlayer() user assisted remote code execution poc by Nine:Situations:Group::surfista (IE7/8) our site: retrogodaltervistaorg/ software site: wwwsopcastorg/ Through the SetExternalPlayer() method and the ExternalPlayer property is possible to associate an ...