Intrusion PreventionXunlei.Thunder.DapPlayer.ActiveX.Code.Execution
Description
There is a buffer overflow vulnerability in an ActiveX control that is part of Xunlei Web Thunder 5.6.9.344. It may allow remote attackers to execute arbitrary code via a long first argument to the DownURL2 method.
Affected Products
Xunlei Web Thunder 5.6.9.344
Impact
System compromise, remote code execution.
Recommended Actions
Currently we are not aware of any vendor supplied patches for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-12-11 | 16.978 |
| ID | 15026 |
| Created | Oct 18, 2007 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2007-5064 |
| Exploit Prediction Score | 22.82% |
| Default Action | pass |
| Active | |
| Affected OS | Windows |
| Affected App | Other |