GOM Player 'avi' File NULL Pointer Dereference Remote Denial of Service Vulnerability

Bugtraq ID:	55840
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 09 2012 12:00AM
Updated:	Dec 10 2012 06:40PM
Credit:	wh1ant
Vulnerable:
Not Vulnerable:

GOM Player 'avi' File NULL Pointer Dereference Remote Denial of Service Vulnerability

GOM Player to a remote denial-of-service vulnerability.

Attackers may leverage this issue to crash the affected application, denying service to legitimate users. Due to the nature of this issue, arbitrary code execution may be possible; this has not been confirmed.

GOM Player 2.1.44.5123 is vulnerable; other versions may also be affected.

GOM Player 'avi' File NULL Pointer Dereference Remote Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/55840.py.txt

GOM Player 'avi' File NULL Pointer Dereference Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GOM Player 'avi' File NULL Pointer Dereference Remote Denial of Service Vulnerability

References:

• GOM Player Homepage (GRETECH CORP.)