Zoom Player Malformed ZPL File Buffer Overflow Vulnerability

Bugtraq ID:	27007
Class:	Boundary Condition Error
CVE:	CVE-2007-6533
Remote:	Yes
Local:	No
Published:	Dec 24 2007 12:00AM
Updated:	May 07 2015 05:34PM
Credit:	Luigi Auriemma is credited with the discovery of this vulnerability.
Vulnerable:	Inmatrix Zoom Player 6.00 beta2 Inmatrix Zoom Player 5 Inmatrix Zoom Player 3.30
Not Vulnerable:

Zoom Player Malformed ZPL File Buffer Overflow Vulnerability

Zoom Player is prone to a buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application or to crash the application, denying further service to legitimate users.

This issue affects Zoom Player 6.00 beta 2 and all releases contained in the Zoom Player 5 branch.

Zoom Player Malformed ZPL File Buffer Overflow Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to open a malicious file using the affected application.

The following exploits are available:

• /data/vulnerabilities/exploits/27007.zpl
• /data/vulnerabilities/exploits/27007.php

Zoom Player Malformed ZPL File Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Zoom Player Malformed ZPL File Buffer Overflow Vulnerability

References:

• Zoom Player Pro Homepage (Inmatrix)
  
• Unicode buffer-overflow in Zoom Player 6.00b2 (Luigi Auriemma )