Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.900630
Kategorie:Buffer overflow
Titel:Xilisoft Video Converter Buffer Overflow Vulnerability
Zusammenfassung:Xilisoft Video Converter is prone to a buffer overflow vulnerability.
Beschreibung:Summary:
Xilisoft Video Converter is prone to a buffer overflow vulnerability.

Vulnerability Insight:
The cause is due to an error in ape_plugin.plg when parsing malicious .CUE
files containing overly long string.

Vulnerability Impact:
This issue can be exploited to corrupt the memory and to execute arbitrary
code in the context of the affected application.

Affected Software/OS:
Xilisoft Video Converter version 3.x to 3.1.53.0704n and 5.x to 5.1.23.0402
on Windows.

Solution:
No known solution was made available for at least one year since the disclosure
of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer
release, disable respective features, remove the product or replace the product by another one.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2009-1370
BugTraq ID: 34472
http://www.securityfocus.com/bid/34472
https://www.exploit-db.com/exploits/8390
http://secunia.com/advisories/34660
XForce ISS Database: vcw-cue-bo(49807)
https://exchange.xforce.ibmcloud.com/vulnerabilities/49807
CopyrightCopyright (C) 2009 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.