Test Kennung:	1.3.6.1.4.1.25623.1.0.902055
Kategorie:	Buffer overflow
Titel:	BS.Player '.bsl' File Buffer Overflow Vulnerabilities
Zusammenfassung:	BS Player is prone to multiple buffer overflow vulnerabilities.
Beschreibung:	Summary: BS Player is prone to multiple buffer overflow vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - A boundary error while processing specially crafted 'BSI' files, when user opens a specially crafted 'BSI' file containing an overly long 'Skin' key in the 'Options' section. - A boundary error in the processing of 'ID3' tags when a user adds a specially crafted mp3 file to the media library. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary code by tricking a user into opening a specially files. Failed attacks will cause denial-of-service conditions. Affected Software/OS: BS.Global BS.Player version 2.51 Build 1022 and prior. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2004 BugTraq ID: 37831 http://www.securityfocus.com/bid/37831 http://www.exploit-db.com/exploits/11154 http://www.mertsarica.com/?p=511 http://www.mertsarica.com/codes/bsplayer_seh_overwrite.py http://secunia.com/advisories/38221 http://www.vupen.com/english/advisories/2010/0148 XForce ISS Database: bsplayer-bsi-bo(55708) https://exchange.xforce.ibmcloud.com/vulnerabilities/55708 Common Vulnerability Exposure (CVE) ID: CVE-2010-2009 BugTraq ID: 38568 http://www.securityfocus.com/bid/38568 http://www.packetstormsecurity.org/1003-advisories/bsplayerml-overflow.txt http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4932.php
Copyright	Copyright (C) 2010 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.