CVE-2010-0356 describes a stack-based buffer overflow vulnerability in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control within Viscom Software Movie Player Pro SDK ActiveX 6.8. An attacker can exploit this by providing a long strFontName parameter to the DrawText method, leading to arbitrary code execution. With a CVSS score of 9.3, this vulnerability is critical, allowing remote attackers to achieve complete compromise (confidentiality, integrity, availability) with medium attack complexity. While not listed in CISA's KEV catalog, Metasploit modules and ExploitDB entries confirm the availability of exploit code, indicating a high potential for exploitation despite no reported active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
6.8CPE matchmatch criteria | cpe:2.3:a:viscomsoft:movie_player_pro_sdk_activex:6.8:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.