CVE-2010-0990

Related Files

Creative Software AutoUpdate Engine 2 ActiveX Control Buffer Overflow

Posted Jun 12, 2010

Authored by Carsten Eiram | Site secunia.com

Secunia Research has discovered a vulnerability in Creative Software AutoUpdate Engine 2 ActiveX control, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused by a boundary error in a callback function used when handling the "BrowseFolder()" method. This can be exploited to cause a stack-based buffer overflow via an overly long string argument. Successful exploitation allows execution of arbitrary code.

tags | advisory, overflow, arbitrary, activex

advisories | CVE-2010-0990

SHA-256 | 1a040ae272823bb9fc4aa52549e6a4a529563663d6e0d78a153410b3c765b0cf

Download | Favorite | View