3D Life Player WebPlayer ActiveX Buffer Overflow Exploit

3D Life Player suffers from an ActiveX stack overflow. The exploit is triggered when the SRC property processes a long string argument resulting in a stack-based buffer overflow. This module runs a web server waiting for vulnerable clients (Internet Explorer 6 or 7) to connect to it. When the client connects, it will try to install an agent by exploiting this vulnerability.
Exploit Platform
Exploit Type
Product Name