← Vulnerability feed

Vulnerability record · CVE-2007-3829 · published 17 July 2007

CVE-2007-3829: Interactual technologies interactual player vulnerability

IInteractual Technologies · Interactual Player

Multiple stack-based buffer overflows in (a) InterActual Player 2.60.12.0717 and (b) Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a (1) long FailURL attribute in the IAMCE ActiveX Control (IAMCE.dll) or a (2) long URLCode attribute in the IAKey ActiveX Control (IAKey.dll). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

9.3 CVSS 2.0 High EPSS 8.2% · top 5.3%
9.3CVSS 2.0 base score
8.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Multiple stack-based buffer overflows in (a) InterActual Player 2.60.12.0717 and (b) Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a (1) long FailURL attribute in the IAMCE ActiveX Control (IAMCE.dll) or a (2) long URLCode attribute in the IAKey ActiveX Control (IAKey.dll). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/37717
http://osvdb.org/37718
http://secunia.com/advisories/25718 Vendor Advisory
http://secunia.com/advisories/25739 Vendor Advisory
http://www.kb.cert.org/vuls/id/470913 US Government Resource
http://www.kb.cert.org/vuls/id/916897 US Government Resource
http://www.securityfocus.com/bid/24919
https://exchange.xforce.ibmcloud.com/vulnerabilities/35422
https://exchange.xforce.ibmcloud.com/vulnerabilities/35423
http://osvdb.org/37717
http://osvdb.org/37718
http://secunia.com/advisories/25718 Vendor Advisory
http://secunia.com/advisories/25739 Vendor Advisory
http://www.kb.cert.org/vuls/id/470913 US Government Resource
http://www.kb.cert.org/vuls/id/916897 US Government Resource
http://www.securityfocus.com/bid/24919
https://exchange.xforce.ibmcloud.com/vulnerabilities/35422
https://exchange.xforce.ibmcloud.com/vulnerabilities/35423

Track CVE-2007-3829 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2009-4840Roxio cineplayer memory buffer overflow vulnerabilityHeap-based buffer overflow in the IAManager ActiveX control in IAManager.dll in Roxio CinePlayer 3.2 allows remote attackers to execute arbitrary cod…EPSS 8.0%9.3CVE-2009-4841Roxio cineplayer memory buffer overflow vulnerabilityHeap-based buffer overflow in the SonicMediaPlayer ActiveX control in SonicMediaPlayer.dll in Roxio CinePlayer 3.2 allows remote attackers to execute…EPSS 7.3%9.3CVE-2007-1559Roxio cineplayer vulnerabilityMultiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via (1) unspe…EPSS 32%9.3CVE-2007-0348Interactual technologies interactual player memory buffer overflow vulnerabilityStack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.…EPSS 35%6.4CVE-2006-3925Interactual technologies interactual player vulnerabilityStack-based buffer overflow in ITIRecorder.MicRecorder ActiveX control in iarecord.dll in InterActual Player before 2.6 allows remote attackers to ex…EPSS 2.8%

Source: NIST National Vulnerability Database (record CVE-2007-3829), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.