VideoSpirit Pro and Lite '.visprj' File Multiple Buffer Overflow Vulnerabilities
BID:45741
Info
VideoSpirit Pro and Lite '.visprj' File Multiple Buffer Overflow Vulnerabilities
| Bugtraq ID: | 45741 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 08 2011 12:00AM |
| Updated: | Nov 13 2013 12:14AM |
| Credit: | xsploitedsec and Secunia |
| Vulnerable: |
VeryTools VideoSpirit Pro 1.70 VeryTools VideoSpirit Pro 1.6.8.1 VeryTools VideoSpirit Lite 1.4.0.1 |
| Not Vulnerable: | |
Discussion
VideoSpirit Pro and Lite '.visprj' File Multiple Buffer Overflow Vulnerabilities
VideoSpirit Pro and Lite are prone to multiple remote buffer-overflow vulnerabilities because of boundary errors when processing certain files.
Remote attackers can exploit these issues by enticing an unsuspecting user into opening maliciously crafted files.
Successful exploits will allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely result in a denial of service.
VideoSpirit Pro versions 1.70 and prior, and VideoSpirit Lite 1.4.0.1 are vulnerable; other versions may also be affected.
VideoSpirit Pro and Lite are prone to multiple remote buffer-overflow vulnerabilities because of boundary errors when processing certain files.
Remote attackers can exploit these issues by enticing an unsuspecting user into opening maliciously crafted files.
Successful exploits will allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely result in a denial of service.
VideoSpirit Pro versions 1.70 and prior, and VideoSpirit Lite 1.4.0.1 are vulnerable; other versions may also be affected.
Exploit / POC
VideoSpirit Pro and Lite '.visprj' File Multiple Buffer Overflow Vulnerabilities
The following exploits are available:
The following exploits are available:
Solution / Fix
VideoSpirit Pro and Lite '.visprj' File Multiple Buffer Overflow Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
VideoSpirit Pro and Lite '.visprj' File Multiple Buffer Overflow Vulnerabilities
References:
References:
- CORELAN-11-001 �?? VeryTools Videospirit Pro 1.70 Stack Buffer Overflow (Corelan Team)
- VideoSpirit (VeryTools)