CVE-2010-0990

no score yetEPSS 4.6%

Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01, allows remote attackers to execute arbitrary code via vectors related to the BrowseFolder method.

EPSS: 4.6% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2010-06-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

creative:autoupdate
creative:autoupdate_engine_activex_control

References

http://secunia.com/advisories/38970
http://secunia.com/secunia_research/2010-52/
http://www.securityfocus.com/archive/1/511795/100/0/threaded
http://www.securityfocus.com/bid/40768
http://secunia.com/advisories/38970

Check your stack JSON