{"id":"CVE-2020-7803","aliases":["EUVD-2020-28735","GHSA-6pgf-fcrx-j998"],"status":"published","title":"Zoneplayer ActiveX File Download Vulnerability","description":"IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01168,"percentile":0.6763,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2020-05-07T17:49:26Z","modified":"2026-06-17T03:25:28Z","products":[{"vendor":"imgtech","product":"zoneplayer"},{"vendor":"imgtech co,ltd","product":"zoneplayer"}],"references":[{"url":"https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35346","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://www.zoneplayer.co.kr/","tags":["x_refsource_CONFIRM","x_transferred","Product","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7803"},{"url":"https://github.com/advisories/GHSA-6pgf-fcrx-j998"}],"sources":{"cve":[{"id":"CVE-2020-7803","title":"Zoneplayer ActiveX File Download Vulnerability","description":"IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution.","status":"published","published":"2020-05-07T17:49:26Z","modified":"2024-08-04T09:41:01.887Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:58.787905Z"}],"euvd":[{"id":"EUVD-2020-28735","description":"IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution.","status":"published","published":"2020-05-07T17:49:26Z","modified":"2024-08-04T09:41:01Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:07:59.058668Z"}],"ghsa":[{"id":"GHSA-6pgf-fcrx-j998","title":"IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior...","description":"IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution.","status":"published","published":"2022-05-24T17:17:26Z","modified":"2023-01-29T05:02:34Z","updated_at":"2026-11-02T14:45:07.130995Z"}],"nvd":[{"id":"CVE-2020-7803","description":"IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution.","status":"published","published":"2020-05-07T18:15:11.413Z","modified":"2026-06-17T03:25:28.413Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:06:00.784809Z"}]}}