CoolPlayer Skin File Buffer Overflow Vulnerability

Bugtraq ID:	32947
Class:	Boundary Condition Error
CVE:	CVE-2009-1449
Remote:	Yes
Local:	No
Published:	Dec 21 2008 12:00AM
Updated:	May 05 2009 07:46PM
Credit:	r0ut3r
Vulnerable:	CoolPlayer CoolPlayer+ Portable 2.19.1 CoolPlayer CoolPlayer 219
Not Vulnerable:

CoolPlayer Skin File Buffer Overflow Vulnerability

CoolPlayer is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

The issue occurs when handling specially crafted skin files.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts likely result in denial-of-service conditions.

This issue affects CoolPlayer 219; other versions may be vulnerable as well.

CoolPlayer Skin File Buffer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/32947.c
• /data/vulnerabilities/exploits/32947-xp-sp3.c
• /data/vulnerabilities/exploits/32947-jbrown.pl
• /data/vulnerabilities/exploits/32947-Stack.py

CoolPlayer Skin File Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

CoolPlayer Skin File Buffer Overflow Vulnerability

References:

• # CoolPlayer 2.19 (Skin File) Local Buffer Overflow (r0ut3r)
  
• CoolPlayer Web Site (CoolPlayer)
  
• CoolPlayer 2.19 (Skin File) Local Buffer Overflow Exploit ([email protected])