{"id":"CVE-2020-7803","state":"PUBLISHED","title":"Zoneplayer ActiveX File Download Vulnerability","description":"IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution.","publishedAt":"2020-05-07T17:49:26.000Z","updatedAt":"2024-08-04T09:41:01.887Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"krcert"},"assigner":"krcert","products":["IMGTech Co,Ltd Zoneplayer"],"affected":[{"vendor":"IMGTech Co,Ltd","product":"Zoneplayer","versions":[{"version":"2.0.1.4 and prior","status":"affected"}]}],"references":["https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35346","http://www.zoneplayer.co.kr/"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T19:47:41.446Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/7xxx/CVE-2020-7803.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-7803","state":"PUBLISHED","datePublished":"2020-05-07T17:49:26.000Z","dateUpdated":"2024-08-04T09:41:01.887Z","assignerShortName":"krcert","assignerOrgId":"cdd7a122-0fae-4202-8d86-14efbacc2863","dateReserved":"2020-01-22T00:00:00.000Z"},"containers":{"cna":{"title":"Zoneplayer ActiveX File Download Vulnerability","descriptions":[{"lang":"en","value":"IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution."}],"affected":[{"vendor":"IMGTech Co,Ltd","product":"Zoneplayer","versions":[{"version":"2.0.1.4 and prior","status":"affected"}]}],"references":[{"url":"https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35346","tags":["x_refsource_CONFIRM"]},{"url":"http://www.zoneplayer.co.kr/","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20 Improper Input Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"krcert","dateUpdated":"2020-05-07T17:49:26.000Z","orgId":"cdd7a122-0fae-4202-8d86-14efbacc2863"},"credits":[{"lang":"en","value":"Yu, Donghyun"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vuln@krcert.or.kr","ID":"CVE-2020-7803","STATE":"PUBLIC","TITLE":"Zoneplayer ActiveX File Download Vulnerability"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Zoneplayer","version":{"version_data":[{"version_value":"2.0.1.4 and prior"}]}}]},"vendor_name":"IMGTech Co,Ltd"}]}},"credit":[{"lang":"eng","value":"Yu, Donghyun"}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-20 Improper Input Validation"}]}]},"references":{"reference_data":[{"name":"https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35346","refsource":"CONFIRM","url":"https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35346"},{"name":"http://www.zoneplayer.co.kr/","refsource":"CONFIRM","url":"http://www.zoneplayer.co.kr/"}]},"source":{"discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35346","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.zoneplayer.co.kr/","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T09:41:01.887Z"}}]}}}