CVE-2007-0949

EPSS 16.3%

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/5032unverified cve_referencewww.exploit-db.com/exploits/5077unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/33187 http://secunia.com/advisories/23999 https://exchange.xforce.ibmcloud.com/vulnerabilities/32479 https://www.exploit-db.com/exploits/5032 https://www.exploit-db.com/exploits/5077 http://www.securityfocus.com/bid/22553