CVE-2007-5911
Viewpoint Media Player 3.2 - Remote Code Execution via AxMetaStream ActiveX Control Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-5911. PoCs published by shinnai.
AI-analyzed exploit summary This exploit demonstrates a stack-based buffer overflow in Viewpoint Media Player's AxMetaStream.dll via multiple vulnerable methods (e.g., ComponentClassID). The PoC uses VBScript to trigger the overflow with a long string, leading to potential remote code execution.
Description
Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the (1) BroadcastKey, (2) BroadcastKeyFileURL, (3) Component, (4) ComponentClassID, (5) ComponentFileName, (6) ExtraProperty, (7) Properties, (8) RequiredVersions, (9) Source, or (10) XMLText method.
Exploits (1)
This exploit demonstrates a stack-based buffer overflow in Viewpoint Media Player's AxMetaStream.dll via multiple vulnerable methods (e.g., ComponentClassID). The PoC uses VBScript to trigger the overflow with a long string, leading to potential remote code execution.