CVE-2011-1065

EUVD-2011-1080
Multiple stack-based buffer overflows in the PIPIWebPlayer ActiveX control (PIWebPlayer.ocx) in PIPI Player 2.8.0.0 allow remote attackers to execute arbitrary code via long arguments to the (1) PlayURL or (2) PlayURLWithLocalPlayer methods.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
pipipipi_player
2.8.0.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/43394
http://www.securityfocus.com/bid/46468
http://www.wooyun.org/bugs/wooyun-2010-01382
http://www.wooyun.org/bugs/wooyun-2010-01383
https://exchange.xforce.ibmcloud.com/vulnerabilities/65537
http://secunia.com/advisories/43394
http://www.securityfocus.com/bid/46468
http://www.wooyun.org/bugs/wooyun-2010-01382
http://www.wooyun.org/bugs/wooyun-2010-01383
https://exchange.xforce.ibmcloud.com/vulnerabilities/65537