CVE-2007-6533 Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in...
HighCVSS 7.5
EPSS 12.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inmatrix zoom player | = 5 | No fix listed |
| inmatrix zoom player | = 6.00beta2 | No fix listed |
References
- aluigi.altervista.org
- 39872 vdb-entry
- 28214 third-party-advisory
- 3486 third-party-advisory
- 20071224 Unicode buffer-overflow in Zoom Player 6.00b2 mailing-list
- 27007 exploit vdb-entry
- ADV-2007-4309 vdb-entry
- zoomplayer-errormessage-bo(39262) vdb-entry