CVE-2011-2590: Uusee Uuplayer Activex Control

High severity, CVSS 9.3. EPSS: 1.9% chance of exploitation in the next 30 days.

The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter.

Affected products

  • Uusee Uuplayer Activex Control: version 6.0.0.1 only
  • Uusee Uusee: version 2010_6.11.0609.2 only

Published 2011-08-09. Last modified 2026-06-16.