Total Video Player 'TVP type' Tag Handling Remote Buffer Overflow Vulnerability
BID:32456
Info
Total Video Player 'TVP type' Tag Handling Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 32456 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 24 2008 12:00AM |
| Updated: | Nov 25 2008 09:52PM |
| Credit: | Cn4phux |
| Vulnerable: |
EffectMatrix Software Total Video Player 1.31 |
| Not Vulnerable: | |
Discussion
Total Video Player 'TVP type' Tag Handling Remote Buffer Overflow Vulnerability
Total Video Player is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial of service.
Total Video Player 1.31 provided by 'vcen.dll' is affected; other versions may also be vulnerable.
Total Video Player is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial of service.
Total Video Player 1.31 provided by 'vcen.dll' is affected; other versions may also be vulnerable.
Exploit / POC
Total Video Player 'TVP type' Tag Handling Remote Buffer Overflow Vulnerability
The following file-generator script is available:
The following file-generator script is available:
Solution / Fix
Total Video Player 'TVP type' Tag Handling Remote Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Total Video Player 'TVP type' Tag Handling Remote Buffer Overflow Vulnerability
References:
References:
- Total Video Player Homepage (EffectMatrix Software)