Spider Player Multiple Playlist Files Buffer Overflow Vulnerability

Bugtraq ID:	33548
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 30 2009 12:00AM
Updated:	Feb 02 2009 05:59PM
Credit:	Houssamix
Vulnerable:	VIT Software Spider Player 2.3.9 .5
Not Vulnerable:

Spider Player Multiple Playlist Files Buffer Overflow Vulnerability

Spider Player is prone to an off-by-one buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

Successfully exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the user running the affected application. Failed exploit attempts will likely crash the application.

Spider Player 2.3.9.5 is vulnerable; other versions may also be affected.

Spider Player Multiple Playlist Files Buffer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/33548.py

Spider Player Multiple Playlist Files Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Spider Player Multiple Playlist Files Buffer Overflow Vulnerability

References:

• Spider Player Homepage (VIT Software)