CVE-2013-3259 Stack-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file.
MediumCVSS 6.8
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inmatrix zoom player | <= 8.6.1 | No fix listed |
| inmatrix zoom player | = 8.00 | No fix listed |
| inmatrix zoom player | = 8.1.1 | No fix listed |
| inmatrix zoom player | = 8.1.5 | No fix listed |
| inmatrix zoom player | = 8.1.6 | No fix listed |
| inmatrix zoom player | = 8.5 | No fix listed |
| inmatrix zoom player | = 8.6 | No fix listed |
| inmatrix zoom player | = 8.10 | No fix listed |
References
- 94037 vdb-entry
- 52698 third-party-advisory vendor-advisory
- 60418 vdb-entry
- zoomplayer-cve20133259-bmp-bo(84835) vdb-entry