ID de Prueba:	1.3.6.1.4.1.25623.1.0.902055
Categoría:	Buffer overflow
Título:	BS.Player '.bsl' File Buffer Overflow Vulnerabilities
Resumen:	BS Player is prone to multiple buffer overflow vulnerabilities.
Descripción:	Summary: BS Player is prone to multiple buffer overflow vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - A boundary error while processing specially crafted 'BSI' files, when user opens a specially crafted 'BSI' file containing an overly long 'Skin' key in the 'Options' section. - A boundary error in the processing of 'ID3' tags when a user adds a specially crafted mp3 file to the media library. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary code by tricking a user into opening a specially files. Failed attacks will cause denial-of-service conditions. Affected Software/OS: BS.Global BS.Player version 2.51 Build 1022 and prior. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2004 BugTraq ID: 37831 http://www.securityfocus.com/bid/37831 http://www.exploit-db.com/exploits/11154 http://www.mertsarica.com/?p=511 http://www.mertsarica.com/codes/bsplayer_seh_overwrite.py http://secunia.com/advisories/38221 http://www.vupen.com/english/advisories/2010/0148 XForce ISS Database: bsplayer-bsi-bo(55708) https://exchange.xforce.ibmcloud.com/vulnerabilities/55708 Common Vulnerability Exposure (CVE) ID: CVE-2010-2009 BugTraq ID: 38568 http://www.securityfocus.com/bid/38568 http://www.packetstormsecurity.org/1003-advisories/bsplayerml-overflow.txt http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4932.php
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.