CVE-2009-1740

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-05-20 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) 2.11.918.2006 allow remote attackers to execute arbitrary code via a long argument to the (1) SetFilePath and (2) SetClientCookie methods. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Dlink Mpeg4 Viewer Activex Control: 2.11.918.2006

References

http://osvdb.org/54458
http://secunia.com/advisories/35066
http://www.securityfocus.com/bid/34990
https://exchange.xforce.ibmcloud.com/vulnerabilities/50556
http://osvdb.org/54458
http://secunia.com/advisories/35066
http://www.securityfocus.com/bid/34990
https://exchange.xforce.ibmcloud.com/vulnerabilities/50556

Get alerted when CVE-2009-1740 or the next vulnerability affects your stack