CVE-2011-2591

Multiple buffer overflows in the Provideo ActiveX controls allow remote attackers to execute arbitrary code via crafted input fields, as demonstrated by (1) a long strIp argument to the voice method in 2way.dll in the alarm 1.0.3.1 ActiveX control, (2) a network response to AXPlayer.ocx in the GMAXPlayer 2.0.8.2 ActiveX control, the (3) UserName or (4) Password parameter to AXPlayer.ocx in the GMAXPlayer 2.0.8.2 ActiveX control, (5) a long Id parameter to the GetString method in PAxPlayer.ocx in the PAxPlayer 3.0.0.9 ActiveX control, or (6) a long strAdr parameter to the ConnectIPCam method in PAxPlayer.ocx in the PAxPlayer 3.0.0.9 ActiveX control.

• CWE-119

• http://osvdb.org/74310
• http://osvdb.org/74311
• http://osvdb.org/74312
• http://osvdb.org/74313
• http://osvdb.org/74314
• http://secunia.com/secunia_research/2011-56/Vendor Advisory
• http://secunia.com/secunia_research/2011-57/Vendor Advisory
• http://secunia.com/secunia_research/2011-58/Vendor Advisory
• http://www.securityfocus.com/bid/48977
• http://osvdb.org/74310
• http://osvdb.org/74311
• http://osvdb.org/74312
• http://osvdb.org/74313
• http://osvdb.org/74314
• http://secunia.com/secunia_research/2011-56/Vendor Advisory
• http://secunia.com/secunia_research/2011-57/Vendor Advisory
• http://secunia.com/secunia_research/2011-58/Vendor Advisory
• http://www.securityfocus.com/bid/48977

Published

Aug 5, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2585Cisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1…
• CVE-2011-2586The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assis…
• CVE-2011-2587Heap-based buffer overflow in the DemuxAudioSipr function in…
• CVE-2011-2588Heap-based buffer overflow in the AVI_ChunkRead_strf functio…
• CVE-2011-2589Heap-based buffer overflow in the SendLogAction method in th…
• CVE-2011-2590The Play method in the UUPlayer ActiveX control 6.0.0.1 in U…
• CVE-2011-2592Heap-based buffer overflow in the StartEpa method in the nse…
• CVE-2011-2593Integer overflow in the StartEpa method in the nsepacom Acti…
• CVE-2011-2594Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possi…
• CVE-2011-2595Multiple stack-based buffer overflows in ACDSee FotoSlate 4.…
• CVE-2011-2597The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.…
• CVE-2011-2598The WebGL implementation in Mozilla Firefox 4.x allows remot…