Total Video Player 'DefaultSkin.ini' Remote Buffer Overflow Vulnerability
BID:33373
Info
Total Video Player 'DefaultSkin.ini' Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 33373 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 20 2009 12:00AM |
| Updated: | Jan 23 2009 09:42PM |
| Credit: | His0k4 |
| Vulnerable: |
EffectMatrix Software Total Video Player 1.31 |
| Not Vulnerable: | |
Discussion
Total Video Player 'DefaultSkin.ini' Remote Buffer Overflow Vulnerability
Total Video Player is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial of service.
Total Video Player 1.31 is affected; other versions may also be vulnerable.
Total Video Player is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial of service.
Total Video Player 1.31 is affected; other versions may also be vulnerable.
Exploit / POC
Total Video Player 'DefaultSkin.ini' Remote Buffer Overflow Vulnerability
The following example exploit is available:
The following example exploit is available:
Solution / Fix
Total Video Player 'DefaultSkin.ini' Remote Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Total Video Player 'DefaultSkin.ini' Remote Buffer Overflow Vulnerability
References:
References:
- Total Video Player Homepage (EffectMatrix Software)