ALLPlayer '.m3u' File Remote Buffer Overflow Vulnerability
BID:62926
Info
ALLPlayer '.m3u' File Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 62926 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-7409 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 09 2013 12:00AM |
| Updated: | Nov 04 2014 12:57AM |
| Credit: | metacom |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
ALLPlayer '.m3u' File Remote Buffer Overflow Vulnerability
ALLPlayer is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary-checks on user-supplied data.
Attackers can exploit this issue to execute arbitrary code within the context of the affected application.
ALLPlayer 5.6.2 through 5.8.1 are vulnerable.
ALLPlayer is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary-checks on user-supplied data.
Attackers can exploit this issue to execute arbitrary code within the context of the affected application.
ALLPlayer 5.6.2 through 5.8.1 are vulnerable.
Exploit / POC
ALLPlayer '.m3u' File Remote Buffer Overflow Vulnerability
The following proof of concept is available:
The following proof of concept is available:
Solution / Fix
ALLPlayer '.m3u' File Remote Buffer Overflow Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
ALLPlayer '.m3u' File Remote Buffer Overflow Vulnerability
References:
References: