Virtools Web Player Buffer Overflow Vulnerability

Bugtraq ID:	14990
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 30 2005 12:00AM
Updated:	Sep 30 2005 12:00AM
Credit:	Luigi Auriemma <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	Virtools Virtools Web Player 3.0 .0.100
Not Vulnerable:	Virtools Virtools Web Player 3.0 .0.101

Virtools Web Player Buffer Overflow Vulnerability

Virtools Web Player is prone to a buffer overflow vulnerability. This issue is due to a failure in the application to perform proper bounds checking on user-supplied data.

A remote attacker can exploit this issue to execute arbitrary code and gain unauthorized access.

Virtools Web Player Buffer Overflow Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/virtbugs.c

Virtools Web Player Buffer Overflow Vulnerability

Solution:
Reports indicate the vendor has addressed this issue in version 1.0.0.101; this has not been confirmed by Symantec.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Virtools Web Player Buffer Overflow Vulnerability

References:

• Virtools Homepage (Virtools)
  
• Virtools Web Player Homepage (Virtools)
  
• Buffer-overflow and directory traversal bugs in Virtools Web Player 3.0.0.100 (Luigi Auriemma )