CVE-2011-2590 - The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter

Back Back to CVE browser

HIGH

The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter

Published Aug 9, 2011

9.3

HIGH

CVSS 2.0

EPSS 1.94%

Description

The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (5)

http://secunia.com/advisories/44885
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2011-59/
x_refsource_MISCVendor Advisory
http://www.osvdb.org/74217
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/48975
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/68975
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/44885		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2011-59/		x_refsource_MISCVendor Advisory
http://www.osvdb.org/74217		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/48975		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/68975		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner flexera

Published Aug 9, 2011

Updated Aug 6, 2024

Reserved Jun 29, 2011

Link CVE-2011-2590

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2011-2590

Red Hat

Severity n/a

Public date n/a

Links CVE-2011-2590