CVE-2009-0811

critical

Description

Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/48955

http://www.securityfocus.com/archive/1/501252/100/0/threaded

http://retrogod.altervista.org/9sg_sopcastia.html

Details

Source: Mitre, NVD

Published: 2009-03-04

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.02086

Detections

Analytics