Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file, aka an M3U UNC Name attack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vuplayer | Vuplayer | * | 2.44 (including) |
References
- http://secunia.com/advisories/23182
- http://www.kb.cert.org/vuls/id/311192
- http://www.securityfocus.com/bid/21363
- http://www.vupen.com/english/advisories/2006/4783
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30629
- https://www.exploit-db.com/exploits/2870
- https://www.exploit-db.com/exploits/2872
- http://secunia.com/advisories/23182
- http://www.kb.cert.org/vuls/id/311192
- http://www.securityfocus.com/bid/21363
- http://www.vupen.com/english/advisories/2006/4783
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30629
- https://www.exploit-db.com/exploits/2870
- https://www.exploit-db.com/exploits/2872