vulnwire
9.3crit

CVE-2007-1559in critical feed3 exploits

Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
31.8%
percentile 98%
Public exploits
3
Metasploit · Exploit-DB

Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via (1) unspecified long property values to SonicMediaPlayer.dll or (2) long arguments to unspecified methods in SonicMediaPlayer.dll.

Exploit prediction (EPSS)

31.81% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • Metasploit exploit/windows/browser/roxio_cineplayer Roxio CinePlayer ActiveX Control Buffer Overflow · metasploit exploit, normal rank · 2007-04-11
  • EDB-29840 Roxio CinePlayer 3.2 - 'SonicDVDDashVRNav.dll' ActiveX Control Remote Buffer Overflow · remote · 2007-04-11
  • EDB-16559 Roxio CinePlayer - ActiveX Control Buffer Overflow (Metasploit) · remote · 2010-04-30

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

References

  • secunia.com /secunia_research/2007-46/advisory/ · x_refsource_MISC, x_transferred
  • osvdb.org /34779 · vdb-entry, x_refsource_OSVDB, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/33590 · vdb-entry, x_refsource_XF, x_transferred
  • securitytracker.com /id?1017906 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • secunia.com /advisories/22251 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/23412 · vdb-entry, x_refsource_BID, x_transferred
  • vupen.com /english/advisories/2007/1337 · vdb-entry, x_refsource_VUPEN, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.