Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-0811. PoCs published by Nine:Situations:Group.
AI-analyzed exploit summary This exploit leverages the Sopcast SopCore ActiveX control (sopocx.ocx 3.0.3.501) to execute arbitrary code via the SetExternalPlayer() method. The PoC demonstrates how an attacker can associate a malicious executable with the 'external player' button, which executes without user prompts when clicked.
Description
Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method.
Exploits (1)
This exploit leverages the Sopcast SopCore ActiveX control (sopocx.ocx 3.0.3.501) to execute arbitrary code via the SetExternalPlayer() method. The PoC demonstrates how an attacker can associate a malicious executable with the 'external player' button, which executes without user prompts when clicked.