CVE-2009-1740

D-Link MPEG4 Viewer ActiveX Control - Heap-Based Buffer Overflow via SetFilePath or SetClientCookie Method

Title source: llm

Description

Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) 2.11.918.2006 allow remote attackers to execute arbitrary code via a long argument to the (1) SetFilePath and (2) SetClientCookie methods. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/54458

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/50556

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/34990

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/35066

Scores

EPSS 0.0193

EPSS Percentile 83.6%

Details

CWE

CWE-119

Status published

Products (1)

dlink/mpeg4_viewer_activex_control 2.11.918.2006

Published May 20, 2009

Tracked Since Feb 18, 2026