CVE-2009-2970: Baidu Baidux

High severity, CVSS 9.3. EPSS: 3.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other products, allows remote attackers to execute arbitrary code via the filename parameter.

Affected products

• Baidu Baidux: any version
• Uitv Uiplayer: any version

Published 2009-10-19. Last modified 2026-06-16.