CVE-2020-7803CWE-20

Zoneplayer ActiveX File Download Vulnerability

High · published May 7, 2020

CVSS v3.1
7.8
EPSS
1%
Percentile
67.1
In the wild
Unconfirmed
What it is

IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01168 · 67.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-05-07T17:49Z
EPSS history
Timeline
  • 07 MAY 17:49Z
    Zoneplayer ActiveX File Download Vulnerability
    cvelistv5