CVE-2007-6609 Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long (1)...
MediumCVSS 5.0
EPSS 5.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long (1) cTag or (2) cValue field in an OGG Vorbis file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| coolplayer | = 217 | No fix listed |
References
- aluigi.altervista.org
- 42671 vdb-entry
- 28226 third-party-advisory
- 3503 third-party-advisory
- 20071228 Buffer-overflow in CoolPlayer 217 mailing-list
- 27061 vdb-entry
- ADV-2008-0008 vdb-entry
- coolplayer-cplireadtagogg-bo(39325) vdb-entry