Skip to content
CVE Tracker
Back

CVE-2011-2591

Multiple buffer overflows in the Provideo ActiveX controls allow remote attackers to execute arbitrary code via crafted input fields, as…

High9.3EPSS 5.4%
Published
Updated
Reserved
Assigned by
flexera

Description

Multiple buffer overflows in the Provideo ActiveX controls allow remote attackers to execute arbitrary code via crafted input fields, as demonstrated by (1) a long strIp argument to the voice method in 2way.dll in the alarm 1.0.3.1 ActiveX control, (2) a network response to AXPlayer.ocx in the GMAXPlayer 2.0.8.2 ActiveX control, the (3) UserName or (4) Password parameter to AXPlayer.ocx in the GMAXPlayer 2.0.8.2 ActiveX control, (5) a long Id parameter to the GetString method in PAxPlayer.ocx in the PAxPlayer 3.0.0.9 ActiveX control, or (6) a long strAdr parameter to the ConnectIPCam method in PAxPlayer.ocx in the PAxPlayer 3.0.0.9 ActiveX control.

Scores

CVSS scores of CVE-2011-2591, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0High9.3AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS (exploitation in 30 days)
5.4% · top 7.3% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 9.3.

Weakness

Affected products

  • n/a

    • affected n/a

References (9)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .