VULNERABILITY INTELLIGENCE
CVE-2009-2970
CVSS score9.3 HIGH
EPSS probability3.31%
CISA KEVNot currently listed
Published2009-10-19
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other products, allows remote attackers to execute arbitrary code via the filename parameter.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer