« Volver al listado

CVE-2011-1065

Estado: ModificadaAlta (9.3)—

Múltiples desbordamientos de búfer basados en pila en el control ActiveX PIPIWebPlayer (PIWebPlayer.ocx) en PIPI Player v2.8.0.0 permite a atacantes remotos ejecutar código arbitrario a través de argumentos largos con los métodos (1) PlayURL o (2) PlayURLWithLocalPlayer.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Pipi — Pipi Player

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-1065",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-02-23T01:00:02.973",
  "references": [
    {
      "url": "http://secunia.com/advisories/43394",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/46468",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.wooyun.org/bugs/wooyun-2010-01382",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.wooyun.org/bugs/wooyun-2010-01383",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65537",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/43394",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/46468",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.wooyun.org/bugs/wooyun-2010-01382",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.wooyun.org/bugs/wooyun-2010-01383",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65537",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple stack-based buffer overflows in the PIPIWebPlayer ActiveX control (PIWebPlayer.ocx) in PIPI Player 2.8.0.0 allow remote attackers to execute arbitrary code via long arguments to the (1) PlayURL or (2) PlayURLWithLocalPlayer methods."
    },
    {
      "lang": "es",
      "value": "Múltiples desbordamientos de búfer basados en pila en el control ActiveX PIPIWebPlayer (PIWebPlayer.ocx) en PIPI Player v2.8.0.0 permite a atacantes remotos ejecutar código arbitrario a través de argumentos largos con los métodos (1) PlayURL o (2) PlayURLWithLocalPlayer."
    }
  ],
  "lastModified": "2026-06-16T23:28:38.613",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pipi:pipi_player:2.8.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2D600A1-3101-4C14-BB20-C7C682B125DF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}