{"uuid": "1ee4a659-137a-421b-838b-77fccecff762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0356", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/viscom_movieplayer_drawtext.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"shinnai\", \"TecR0c \", \"mr_me \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control\\n          in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows\\n          remote attackers to execute arbitrary code via a long strFontName parameter to the\\n          DrawText method.\\n\\n          The victim will first be required to trust the publisher Viscom Software.\\n          This module has been designed to bypass DEP and ASLR under XP IE8, Vista and Win7\\n          with Java support.\", \"disclosure_date\": \"2010-01-12\", \"fullname\": \"exploit/windows/browser/viscom_movieplayer_drawtext\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Viscom Software Movie Player Pro SDK ActiveX 6.8\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/viscom_movieplayer_drawtext.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/viscom_movieplayer_drawtext\", \"references\": [\"CVE-2010-0356\", \"OSVDB-61634\", \"EDB-12320\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"Windows IE6-7\", \"Windows IE8 + JAVA 6 (DEP & ASLR BYPASS)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:16.178197Z"}