CVE-2007-6478 Stack-based buffer overflow in Rosoft Media Player 4.1.7, 4.1.8, and possibly earlier versions allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a....
MediumCVSS 6.8
EPSS 5.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in Rosoft Media Player 4.1.7, 4.1.8, and possibly earlier versions allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in a .M3U file. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rosoftengineering rosoft media player | <= 4.1.8 | No fix listed |
| rosoftengineering rosoft media player | = 4.1.7 | No fix listed |
References
- 28144 third-party-advisory vendor-advisory
- 3470 third-party-advisory
- 39501 vdb-entry
- 20071218 Rosoft Media Player 4.1.7 crash mailing-list
- 20080214 Rosoft Media Player 4.1.8 Buffer Overflow ( .M3U) mailing-list
- 26920 exploit vdb-entry
- ADV-2007-4259 vdb-entry vendor-advisory
- rosoftmediaplayer-m3u-bo(39114) vdb-entry
- 5122 exploit