Monday, December 10, 2007

Media Player Classic 6.4.9 MP4 Stack Overflow 0-day

Media Player Classic is prone to a stack-based buffer-overflow issue because it fails to perform adequate boundary checks on user-supplied data.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts likely result in denial-of-service conditions.

Media Player Classic 6.4.9 is vulnerable; other versions may also be affected.

http://www.securityfocus.com/archive/1/484781


---------------------

Media Player Classic is used as the base of many free media software package, including Real Alternative or Quicktime Alternative.

No comments:

Post a Comment