CVE-2010-0990: Creative Autoupdate

High severity, CVSS 10.0. EPSS: 4.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01, allows remote attackers to execute arbitrary code via vectors related to the BrowseFolder method.

Affected products

• Creative Autoupdate: version 1.40.01 only
• Creative Autoupdate Engine Activex Control: version 2.0.12.0 only

Published 2010-06-15. Last modified 2026-06-16.