Total Player M3U File Denial of Service Vulnerability
BID:27021
Info
Total Player M3U File Denial of Service Vulnerability
| Bugtraq ID: | 27021 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2007-6558 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 25 2007 12:00AM |
| Updated: | May 07 2015 05:34PM |
| Credit: | David G.M. is credited with the discovery of this vulnerability. |
| Vulnerable: |
Total Player Total Player 3.0 |
| Not Vulnerable: | |
Discussion
Total Player M3U File Denial of Service Vulnerability
Total Player is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to crash the application. Given the nature of this issue, the attacker may be able to execute arbitrary code, but this has not been confirmed.
This issue is reported to affect Total Player 3.0; other versions may also be vulnerable.
Total Player is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to crash the application. Given the nature of this issue, the attacker may be able to execute arbitrary code, but this has not been confirmed.
This issue is reported to affect Total Player 3.0; other versions may also be vulnerable.
Exploit / POC
Total Player M3U File Denial of Service Vulnerability
An attacker can exploit this issue by enticing victims into opening a malicious 'm3u' file.
An attacker can exploit this issue by enticing victims into opening a malicious 'm3u' file.
Solution / Fix
Total Player M3U File Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Total Player M3U File Denial of Service Vulnerability
References:
References:
- Total Player Homepage (Total Player)
- TotalPlayer 3.0 .m3u crash ([email protected])