Skip to content

CVE-2011-0500 Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary code via a VideoSpir...

HighCVSS 9.3 EPSS 30.7% Framework module Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "value" attribute, as demonstrated using a valitem with the mp3 name.

Affected products

ProductAffected versionsFixed in
verytools videospirit lite = 1.4.0.1 No fix listed
verytools videospirit pro <= 1.68 No fix listed
verytools videospirit pro = 1.6.8.1 No fix listed

References

  • 42866 third-party-advisory vendor-advisory
  • 42876 third-party-advisory vendor-advisory
  • 15936 exploit