DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via the bstrSavePath argument.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Jukebox | Musicmatch | * | 10.00.2047 (including) |
Jukebox | Musicmatch | 9.0.5059 (including) | 9.0.5059 (including) |