CVE-2019-9141

Summary

ZInsVX.dll ActiveX Control 2018.02 and earlier in Zoneplayer contains a vulnerability that could allow remote attackers to execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for remote code execution.

Affected Software

VendorProductVersion RangeStatus
IMGTech Co,LtdZInsVX.dll ActiveX Control2018.12 <= 2018.12affected

Weaknesses

  • CWE-20: CWE-20 Improper Input Validation

ADP Enrichment

CVE Program Container

Additional References

References