Executive Summary

Title Move Networks Quantum Streaming Player ActiveX stack buffer overflows
Name VU#298345 First vendor Publication 2007-09-04
Vendor VU-CERT Last vendor Modification 2007-09-21
Severity (Vendor) N/A Revision M

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score 6.8 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores


Vulnerability Note VU#298345

Move Networks Quantum Streaming Player ActiveX stack buffer overflows


The Move Networks Quantum Streaming Player ActiveX controls contain multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.

I. Description

Move Networks Quantum Streaming Player is an ActiveX video player for use in the Internet Explorer web browser. The Quantum Streaming Player ActiveX controls contain stack buffer overflow vulnerabilities in the Buzzer() and Play() methods.

II. Impact

A remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system with privileges of the user.

III. Solution

We are currently unaware of a practical solution to this problem. Please consider the following workarounds

Disable the Quantum Streaming Player ActiveX controls in Internet Explorer

The vulnerable ActiveX controls can be disabled in Internet Explorer by setting the kill bit for the following CLSIDs:

More information about how to set the kill bit is available in Microsoft Support Document 240797. Alternatively, the following text can be saved as a .REG file and imported to set the kill bit for these controls:
    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerActiveX Compatibility{e3e02f12-2adb-478c-8742-5f0819f9f0f4}]
    "Compatibility Flags"=dword:00000400

    [HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerActiveX Compatibility{e473a65c-8087-49a3-affd-c5bc4a10669b}]
    "Compatibility Flags"=dword:00000400
Disable ActiveX

Disabling ActiveX controls in the Internet Zone (or any zone used by an attacker) appears to prevent exploitation of this and other ActiveX vulnerabilities. Instructions for disabling ActiveX in the Internet Zone can be found in the "Securing Your Web Browser" document.

Systems Affected

VendorStatusDate Updated
Move Networks, Inc.Vulnerable4-Sep-2007




This vulnerability was discovered by Will Dormann of the CERT/CC. It was also independently discovered and publicly disclosed by Parvez Anwar.

This document was written by Will Dormann.

Other Information

Date Public09/04/2007
Date First Published09/04/2007 02:26:26 PM
Date Last Updated09/21/2007
CERT Advisory 
CVE NameCVE-2007-4722
Document Revision3

Original Source

Url : http://www.kb.cert.org/vuls/id/298345

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

Application 1

ExploitDB Exploits

id Description
2007-09-04 Move Media Player 1.0 Quantum Streaming ActiveX Control Multiple Buffer Overf...
2008-01-08 Move Networks Quantum Streaming Player - SEH Overwrite Exploit

Open Source Vulnerability Database (OSVDB)

Id Description
37778 Move Media Player Quantum Streaming IE Player ActiveX (qsp2ie07051001.dll) Mu...