DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via the bstrSavePath argument.
Software | From | Fixed in |
---|---|---|
musicmatch / jukebox | - | 10.00.2047.x |
musicmatch / jukebox | 9.0.5059 | 9.0.5059.x |