CVE-2007-5779

EPSS 71.5%◆ VulnCheck KEV

Vexday Risk Score

82Fix now

SSVC decision (CISA)

Act

Exploitation + impact → act immediately

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 71.5%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Lifecycle

27 Oct 2007Metasploit module available

01 Nov 2007Published on NVD

09 May 2010Public PoC

Weaponization speed

919 daysto first PoC

Recommendation: Patch as soon as possible — active exploitation confirmed.

Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player (GOM Player) 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/16572unverified cve_referencewww.exploit-db.com/exploits/4579unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/27418 https://exchange.xforce.ibmcloud.com/vulnerabilities/38159 https://www.exploit-db.com/exploits/4579 http://www.gomplayer.com/forum/viewtopic.html?t=1013 http://www.securityfocus.com/bid/26236 http://www.vupen.com/english/advisories/2007/3634