CVE-2008-0477: Move Networks Inc Move Media Player

High severity, CVSS 10.0. EPSS: 14.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgrade Manager allows remote attackers to execute arbitrary code via a long first argument to the Upgrade method. NOTE: some of these details are obtained from third party information.

Affected products

Published 2008-01-29. Last modified 2026-06-16.